javascript: Clerk Chrome Extension not working. Manifest V3

Package + Version

  • [ x] @clerk/chrome-extension

Dependencies + versions


`{
  "name": "wizevine",
  "version": "0.0.0",
  "author": "no one",
  "description": "",
  "type": "module",
  "license": "MIT",
  "keywords": [
    "chrome-extension",
    "react",
    "vite",
    "create-chrome-ext"
  ],
  "engines": {
    "node": ">=14.18.0"
  },
  "scripts": {
    "dev": "vite",
    "build": "vite build",
    "preview": "vite preview",
    "fmt": "prettier --write '**/*.{jsx,js,json,css,scss,md}'"
  },
  "dependencies": {
    "@clerk/chrome-extension": "^0.3.14",
    "@headlessui/react": "^1.7.13",
    "@heroicons/react": "^2.0.16",
    "dotenv": "^16.3.1",
    "flowbite": "^1.6.5",
    "flowbite-react": "^0.4.3",
    "openai": "^3.2.1",
    "react": "^18.2.0",
    "react-dom": "^18.2.0"
  },
  "devDependencies": {
    "@crxjs/vite-plugin": "^1.0.12",
    "@types/react": "^18.0.14",
    "@types/react-dom": "^18.0.5",
    "@vitejs/plugin-react": "^1.3.2",
    "autoprefixer": "^10.4.14",
    "postcss": "^8.4.21",
    "prettier": "^2.7.1",
    "tailwindcss": "^3.2.7",
    "vite": "^2.9.13"
  }
}
`



## Description

CSP is blocking  clerk chrome extension from loading vital scripts. 

`@clerk_chrome-extension.js?v=1d0ce8ee:18680 Refused to load the script 'https://good-bunny-39.clerk.accounts.dev/npm/@clerk/clerk-js@4/dist/clerk.browser.js' because it violates the following Content Security Policy directive: "script-src 'self' 'wasm-unsafe-eval' 'inline-speculation-rules' http://localhost:* http://127.0.0.1:*". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.`

About this issue

  • Original URL
  • State: closed
  • Created a year ago
  • Comments: 19 (6 by maintainers)

Most upvoted comments

Not too sure why but i’m now facing the same error with latest version “@clerk/chrome-extension”: “0.4.13”,

clerk.mjs:98 Refused to load the script 'https://clerk.XXXXXXXX/cloudflare/turnstile/v0/api.js?render=explicit&_clerk_js_version=4.64.2' because it violates the following Content Security Policy directive: "script-src 'self' http://localhost". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

clerk.mjs:98 Refused to load the script 'https://clerk.XXXXXXXX/cloudflare/turnstile/v0/api.js?render=explicit&_clerk_js_version=4.64.2' because it violates the following Content Security Policy directive: "script-src 'self' 'wasm-unsafe-eval' 'inline-speculation-rules' http://localhost:* http://127.0.0.1:*". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

But actually it only happens when i use the live publishable key. When i use the test publishable key, there is no error 🤔