当前位置：首页 > news >正文

chrome extension无法获取window对象

news 2025/7/18 6:43:05

背景见上一篇博客修改网页内容的方法
上一篇博客之后，我要修改的网页有一个新改版，然后有个数据存在了window中，我直接在js中使用window.xxx发现无法获取。所以有本文。

https://juejin.cn/post/7145749643316428830
https://onelinerhub.com/chrome-extension/window_object#:~:text=chrome-extension%20How%20to%20access%20or%20modify%20window%20object,%3D%20%27console.log%20%28window%29%3B%27%3B%20%28document.head%7C%7Cdocument.documentElement%29.appendChild%20%28script%29%3B%20ctrl%20%2B%20c

搜了一下发现有两种方法，如上，大概就是：

方法1

var script = document.createElement('script');
script.textContent = 'console.log(window);';
(document.head||document.documentElement).appendChild(script);

出现报错：

extensions_version_page.js:6 Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'wasm-unsafe-eval' 'inline-speculation-rules' http://localhost:* http://127.0.0.1:*". Either the 'unsafe-inline' keyword, a hash ('sha256-XnQUOdrKm+cYqdkT/ljnkhjaYaitt2Xh3uRQxH/M9z0='), or a nonce ('nonce-...') is required to enable inline execution.

方法2

{"name": "yeshen_extresion","version": "1.0","description": "yeshen test","manifest_version": 3,"web_accessible_resource": [{"resources": ["assets/*","js/contentScript.js"]}],"content_scripts": [{"matches": ["https://innovation.pm.netease.com/v6/issues/*","https://web.pm.netease.com/v6/issues/*","https://uu.pm.netease.com/v6/issues/*","https://msdk.pm.netease.com/v6/issues/*"],"js": ["extensions_issue_page.js"],"run_at": "document_start"},]
}

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'wasm-unsafe-eval' 'inline-speculation-rules' http://localhost:* http://127.0.0.1:*". Either the 'unsafe-inline' keyword, a hash ('sha256-XnQUOdrKm+cYqdkT/ljnkhjaYaitt2Xh3uRQxH/M9z0='), or a nonce ('nonce-...') is required to enable inline execution.

报错比较清晰，就是注入的代码和原有代码不在一个域下，无法操作/注入javascript对象。

最后我是这样做的：