2ff3ab1d7f
setup.html is opened via chrome.tabs.create using a chrome-extension:// URL which doesn't require WAR. WASM is bundled into service-worker.js/setup.js and never fetched from a web page origin. Leaving them in WAR would expose their URLs to any origin for probing/fingerprinting; shipping an empty WAR array closes the surface. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
35 lines
879 B
JSON
35 lines
879 B
JSON
{
|
|
"manifest_version": 3,
|
|
"name": "relicario",
|
|
"version": "0.1.0",
|
|
"description": "Two-factor encrypted password manager",
|
|
"icons": {
|
|
"16": "icons/icon-16.png",
|
|
"48": "icons/icon-48.png",
|
|
"128": "icons/icon-128.png"
|
|
},
|
|
"permissions": ["storage", "activeTab", "clipboardWrite"],
|
|
"host_permissions": ["<all_urls>"],
|
|
"background": {
|
|
"service_worker": "service-worker.js",
|
|
"type": "module"
|
|
},
|
|
"action": {
|
|
"default_popup": "popup.html",
|
|
"default_icon": {
|
|
"16": "icons/icon-16.png",
|
|
"48": "icons/icon-48.png",
|
|
"128": "icons/icon-128.png"
|
|
}
|
|
},
|
|
"content_scripts": [{
|
|
"matches": ["<all_urls>"],
|
|
"js": ["content.js"],
|
|
"run_at": "document_idle"
|
|
}],
|
|
"content_security_policy": {
|
|
"extension_pages": "script-src 'self' 'wasm-unsafe-eval'; object-src 'self'"
|
|
},
|
|
"web_accessible_resources": []
|
|
}
|