craig says i need more callbacks

2023-09-04 00:42:47 -06:00
parent bcdb71624e
commit 1cd7c99eaf
7 changed files with 71 additions and 4114 deletions
@@ -0,0 +1,90 @@
+<!DOCTYPE html>
+<!-- This exists to load NaCl into context for the background script -->
+<html lang="en">
+    <head>
+        <meta charset="utf-8">
+    </head>
+    <body>
+        <!--
+            Trying to figure out why TweetNaCl isn't loading
+
+            ok so the problem is not an invalid hash, it's something specific
+            to nacl
+
+            to have an inline script, its hash must be specified in
+            manifest.json
+
+            example (integrity key is not necessary, it is there purely for
+            comment purposes)
+
+                 beginning of line
+                V
+                |        <script integrity="sha256-8T3dvQxHPNQvgxzCemw3KGUCM5RhknpCQF6pCcTdFTw=">console.log('bg-test-inline.js line 1!');
+                |</script>
+
+            newline is there for hash purposes
+
+            this works if and only if
+            'sha256-8T3dvQxHPNQvgxzCemw3KGUCM5RhknpCQF6pCcTdFTw=' is included
+            in the manifest.json
+
+            example (top level key):
+
+                 "content_security_policy" : "script-src 'self' 'sha256-8T3dvQxHPNQvgxzCemw3KGUCM5RhknpCQF6pCcTdFTw='; object-src 'self'",
+
+            Absent that explicit allow, I get this error from Firefox:
+
+                Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”).
+
+            Refs:
+                1. https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/manifest.json/content_security_policy
+                2. https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Content_Security_Policy#inline_javascript
+
+            If I include the same script as a file,
+
+                <script src="bg-test-inline.js"></script>
+
+            this works irrespective of if I specify it as allowable in the manifest
+
+            nacl is just refusing to load
+
+                Loading failed for the <script> with source “moz-extension://eafd6a74-b75b-4312-9a34-8087b68395e7/dist/jex_include/local-nacl-1.0.3/nacl.js”.
+
+            I initially thought it was a hash problem, but it is not
+
+            TweetNaCL doesn't work as an ES6 module, it works by destructively
+            updating the window namespace.  This I think was necessary before
+            ES6, and that behavior is retained either because of laziness or
+            because of backward compatibility reasons.
+
+            hmm
+
+            so this just plainly doesn't work and i cannot figure out why
+
+                <script src="dist/jex_include/local-nacl-1.0.3/nacl.js"></script>
+
+            oh my god
+
+                <script src="dist/jex_include/local-tweetnacl-1.0.3/dist/nacl.js"></script>
+
+            i got the url wrong
+
+            i hate myself
+
+            ok well glad we got that sorted out at least
+
+            And i discovered a future potential pitfall
+        -->
+
+        <script src="../dist/jex_include/local-tweetnacl-1.0.3/dist/nacl.js"></script>
+
+        <!--  same but for blakejs
+        <script src="./dist/jex_include/local-blakejs-1.2.1/dist/index.js"></script>
+        -->
+
+        <!--
+            this is a non-issue
+        -->
+        <script type="module" src="../dist/background.js"></script>
+    </body>
+</html>