CODEWITHSUNDEEP
google-chrome-extension
John Bachir
John Bachir

Reputation: 22731

Is there a way to allow a Chrome extension content script to violate mixed-content rules?

I am making a Chrome extension which makes an AJAX call to a local http server. The local server is not https. My extension doesn't work when visiting an https site, because of mixed-content rules.

This is disappointing because I thought the content scripts were totally isolated from the main DOM, so these rules wouldn't matter.

Is there a way to get around this?

Upvotes: 0

Views: 775

Answers (1)

Xan
Xan

Reputation: 77531

You don't have to make the request from the content script itself.

You can delegate that to a background page by requesting it via Messaging.

Also, make sure you have host permissions for your local server. It may even solve the original issue.

Upvotes: 2

Related Questions