Chrome extensions support (manifest.json v3)

[m1k0l4ji3]

Hi, I'm developing a Chrome extension related to the Steam and have encountered a blocking issue with the Content Security Policy. The error message is:

Quote

EvalError: Refused to evaluate a string as JavaScript because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: default-src 'self'.

I'd like to know if there's any planned support or existing workarounds for environments with strict security policies, such as those in newer Chrome extension versions.

[Dr. McKay]

??

What does this have to do with steam-session?

[m1k0l4ji3]

The steam-session uses the protobufjs/codegen module, which internally evaluates strings as JavaScript code. This causes errors in browser extensions because of strict security settings. Here's the full error trace:

Some related issues i found on github: 

• https://github.com/protobufjs/protobuf.js/issues/593
• https://github.com/protobufjs/protobuf.js/issues/1483

Edited May 12 by m1k0l4ji3

[Dr. McKay]

steam-session is a Node.js module, not a browser module.