WebExtension Github CSP Issue

Add-ons Development
#1

I’m trying to convert a Chrome extension into Firefox WebExtension. Its worked out fine so far, but for some reason, I’m facing an issue with GitHub. My Extension adds a small div to the side of the page, but when I try to add it to GitHub, I get the error

Content Security Policy: The page's settings blocked the loading of a resource at self ("script-src https://assets-cdn.github.com").

I’m not sure why though, because in my manifest.json I have set the CSP to be

"content_security_policy": "script-src 'self' 'unsafe-eval' 'unsafe-inline'; object-src 'self'; font-src 'self' data:;"

I’d appreciate any advice on this issue. Its working fine on Chrome as is.

#2

You’re most likely running into this bug. It hasn’t been fixed in the API yet.

#3

Any idea when it will be fixed?

#4

It has a low priority at the moment, so it will probably won’t make the initial release of WebExtensions in Firefox 48.