I'm making a simple chrome extension that stores your passwords to try to get the hang of chrome extension development. However, I've run into an issue. When you type your password in on the popup and hit save it's supposed to save it to chrome.storage.sync and alert you that it did so. However, chrome won't load the script with the error: Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'wasm-unsafe-eval'". Either the 'unsafe-inline' keyword, a hash ('sha256-PfaVjHfWFbJmtU/PEvrfMT58HksWjwxh6ow0JOs564w='), or a nonce ('nonce-...') is required to enable inline execution..
HTML:
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Document</title>
</head>
<body>
<script>popup.js</script>
<h1>100% definately secure password manager </h1>
<input type="text" placeholder="Super secret password..." id="textbox_password">
<input type="button" value="Save" id="button_enter">
</body>
</html>
Javascript:
//popup.js
const button = document.getElementById("button_enter")
button.addEventListener("click", () => {
chrome.storage.sync.set({password: document.getElementById("textbox_password")}, function() {
alert("Password saved: " + document.getElementById("textbox_password"));
});
});