Yes, parsing through the list was my plan of attack.  That it doesn't work
only from content scripts is what I was missing.  I was confused because the
documentation says you can white list third party sites in the manifest, but
then it was still failing.

On Tue, Aug 18, 2009 at 2:34 PM, Aaron Boodman <[email protected]> wrote:

>
> On Tue, Aug 18, 2009 at 8:49 AM, Maxo<[email protected]> wrote:
> > I am trying to write an adblock extension.  The way it works in
> > Firefox is that a user subscribes to a third party list.  That list
> > gets downloaded semi-regularly.
> > Will this setup not work with the proposed API for Chrome?
> > If not what is the best way to proceed to provide the user with the
> > ability to generically call third party subscriptions?
>
> This is possible.
>
> For security, as a general rule, it is a bad idea to include live
> content from third party sites inside an extension. For your
> application, since it is just a list of rules for things to block, it
> should be OK. Just be sure to not eval() anything coming from the
> third party: you should manually actually parse the list with
> JavaScript.
>
> Like Antony said, in order to make this work, you're going to want to
> use a background page:
>
>
> http://src.chromium.org/viewvc/chrome/trunk/src/chrome/common/extensions/docs/background_pages.html
>
> Cross-site XHR only works from extension pages like toolstrips and
> background pages, not from content scripts (though that is something
> we hope to fix eventually).
>
> - a
>
> >
>


-- 
Jack David Baucum
http://maxolasersquad.com
http://www.myspace.com/mlsquad

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Chromium-extensions" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/chromium-extensions?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to