XUL alternative (WebExtension)

I’ve got a question regarding the new web extensions. I want to build a new add-on which is future-proof, therefore I chose to develop a web extension. I want to show a tooltip/overlay whenever a user hovers the mouse above an URL. Currently I’m not sure if this is possible since I just found information how to include a button in the toolbar but nothing about the stuff I want to do.

Is this still possible without XUL or is it not possible to show anything, like tooltips, in the browser when I want to use web extensions? If I want to do something like this what alternatives do I have? I’m talking about the same tooltips which I use in this add-on: https://addons.mozilla.org/de/thunderbird/addon/torpedo-phishing-detection/

I tried to develop another add-on which should help the user deciding how secure a website is. I’m able to distinguish between an http & https site but is it also possible to distinguish between both and a site which uses https but has mixed content? I didn’t find anything when I searched for it.

Thanks for your help!

For the tooltip, you can use content scripts.

Figuring out if a site is mixed content is trickier. Maybe you could iterate through all external resources (again with a content script) and look for any plain HTTP resources in an HTTPS page. You would also need to keep up with any changes in the content using a Mutation Observer.