{"id":15711781,"url":"https://github.com/jacksteamdev/demo-content-script-warning","last_synced_at":"2026-01-11T02:41:33.627Z","repository":{"id":144037121,"uuid":"306364453","full_name":"jacksteamdev/demo-content-script-warning","owner":"jacksteamdev","description":"Experiment to demonstrate what happens when you add a content script to a published extension.","archived":false,"fork":false,"pushed_at":"2023-08-03T06:12:01.000Z","size":141,"stargazers_count":0,"open_issues_count":4,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-02-05T20:05:12.211Z","etag":null,"topics":["chrome-extension","chrome-web-store","content-scripts","experiment","host-permissions"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jacksteamdev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-10-22T14:31:51.000Z","updated_at":"2020-10-23T13:39:08.000Z","dependencies_parsed_at":null,"dependency_job_id":"ba43dc15-431d-4547-8f1d-9051cc5f5f34","html_url":"https://github.com/jacksteamdev/demo-content-script-warning","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":"extend-chrome/javascript-boilerplate","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jacksteamdev%2Fdemo-content-script-warning","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jacksteamdev%2Fdemo-content-script-warning/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jacksteamdev%2Fdemo-content-script-warning/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jacksteamdev%2Fdemo-content-script-warning/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jacksteamdev","download_url":"https://codeload.github.com/jacksteamdev/demo-content-script-warning/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246358251,"owners_count":20764366,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["chrome-extension","chrome-web-store","content-scripts","experiment","host-permissions"],"created_at":"2024-10-03T21:13:55.359Z","updated_at":"2026-01-11T02:41:33.618Z","avatar_url":"https://github.com/jacksteamdev.png","language":"JavaScript","readme":"# Content Script Warning Demonstration\n\nThis repo demonstrates what happens when you add a content script to an extension that is published on the Chrome Web Store.\n\nWarnings for new content scripts or content script match patterns are not documented in Google's Chrome extension docs.\n\n## Hypothesis\n\nOur supposition is:\n\n- Given that an extension is published on the Chrome Web Store\n  - and a user has installed that extension\n- When you add a content script that matches a broader range of urls\n- Then Chrome will require the user to approve these changes\n\nWe will conduct an experiment to verify this, following this method after each iteration:\n\n## Method\n\n1. Pack and install the extension using the Chrome extensions dashboard\n2. Document the warnings\n\n## Iterations\n\n1. Create a simple extension with a content script with narrow host permissions\n2. Broaden the content script host permissions\n3. Add a second content script with host permissions for all urls\n\n## Results\n\nOur supposition was correct. After each update, the extension was disabled and Chrome displayed a warning with the new permissions, requiring user consent before re-enabling the extension.\n\n### Step 1 Installation Warning\n\n![Step 1 Warning Image](https://github.com/jacksteamdev/demo-content-script-warning/blob/master/pngs/step1.png?raw=true)\n\n### Step 2 Update Warning for broader host permissions\n\n![Step 2 Warning Image](https://github.com/jacksteamdev/demo-content-script-warning/blob/master/pngs/step2.png?raw=true)\n\n### Step 3 Update Warning for new content script with all urls\n\n![Step 3 Warning Image](https://github.com/jacksteamdev/demo-content-script-warning/blob/master/pngs/step3.png?raw=true)\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjacksteamdev%2Fdemo-content-script-warning","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjacksteamdev%2Fdemo-content-script-warning","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjacksteamdev%2Fdemo-content-script-warning/lists"}