| Index: chrome/common/extensions/docs/content_scripts.html
|
| diff --git a/chrome/common/extensions/docs/content_scripts.html b/chrome/common/extensions/docs/content_scripts.html
|
| index a20dcd9f467e98cd51e6a39fe61d126dd933ffa0..0dc1407572e5a47d751fc1cd0c1f38b66ed0332d 100644
|
| --- a/chrome/common/extensions/docs/content_scripts.html
|
| +++ b/chrome/common/extensions/docs/content_scripts.html
|
| @@ -15,7 +15,7 @@
|
| </script>
|
| <script type="text/javascript" src="js/api_page_generator.js"></script>
|
| <script type="text/javascript" src="js/bootstrap.js"></script>
|
| - <title>Content Scripts</title></head><body> <div id="gc-container" class="labs">
|
| + <title>Content Scripts - Google Chrome Extensions - Google Code</title></head><body> <div id="gc-container" class="labs">
|
| <!-- SUBTEMPLATES: DO NOT MOVE FROM THIS LOCATION -->
|
| <!-- In particular, sub-templates that recurse, must be used by allowing
|
| jstemplate to make a copy of the template in this section which
|
| @@ -74,33 +74,28 @@
|
| <a href="#gc-toc">Skip to main navigation</a>
|
| </div>
|
| <!-- API HEADER -->
|
| - <div id="gc-header">
|
| - <div id="logo">
|
| -
|
| -
|
| - <img src="images/code_labs_logo.gif" height="43" width="161" alt="Google Code Labs" style="border:0;">
|
| -
|
| + <table id="header" width="100%" cellspacing="0" border="0">
|
| + <tbody><tr>
|
| + <td valign="middle"><img src="images/code_labs_logo.gif" height="43" width="161" alt="Google Code Labs" style="border:0; margin:0;"></td>
|
| + <td valign="middle" width="100%" style="padding-left:0.6em;">
|
| + <form action="http://www.google.com/cse" id="cse" style="margin-top:0.5em">
|
| + <div id="gsc-search-box">
|
| + <input type="hidden" name="cx" value="002967670403910741006:61_cvzfqtno">
|
| + <input type="hidden" name="ie" value="UTF-8">
|
| + <input type="text" name="q" size="55">
|
| + <input class="gsc-search-button" type="submit" name="sa" value="Search">
|
| + <br>
|
| + <span class="greytext">e.g. "ajax apis" or "open source"</span>
|
| + </div>
|
| + </form>
|
|
|
| - </div>
|
| - <div id="search">
|
| - <div id="searchForm" class="searchForm">
|
| - <form action="http://www.google.com/cse" id="cse">
|
| - <div id="gsc-search-box">
|
| - <input type="hidden" name="cx" value="002967670403910741006:61_cvzfqtno">
|
| - <input type="hidden" name="ie" value="UTF-8">
|
| - <input type="text" name="q" size="31">
|
| - <input class="gsc-search-button" type="submit" name="sa" value="Search">
|
| - </div>
|
| - </form>
|
| - <p> </p>
|
| - </div> <!-- end searchForm -->
|
| -
|
| - <script type="text/javascript" src="http://www.google.com/jsapi"></script>
|
| - <script type="text/javascript">google.load("elements", "1", {packages: "transliteration"});</script>
|
| - <script type="text/javascript" src="http://www.google.com/coop/cse/t13n?form=cse&t13n_langs=en"></script>
|
| - <script type="text/javascript" src="http://www.google.com/coop/cse/brand?form=cse&lang=en"></script>
|
| - </div> <!-- end search -->
|
| - </div> <!-- end gc-header -->
|
| + <script type="text/javascript" src="http://www.google.com/jsapi"></script>
|
| + <script type="text/javascript">google.load("elements", "1", {packages: "transliteration"});</script>
|
| + <script type="text/javascript" src="http://www.google.com/coop/cse/t13n?form=cse&t13n_langs=en"></script>
|
| + <script type="text/javascript" src="http://www.google.com/coop/cse/brand?form=cse&lang=en"></script>
|
| + </td>
|
| + </tr>
|
| + </tbody></table>
|
|
|
| <div id="codesiteContent">
|
|
|
| @@ -111,18 +106,17 @@
|
| <li id="home_link">
|
| <a href="index.html" class="selected" title="Google Chrome Extensions documentation home page">Home</a>
|
| </li>
|
| - <li id="blog_link">
|
| - <a href="http://blog.chromium.org/" title="Chromium blog">Blog</a>
|
| - </li>
|
| - <li id="faq_link">
|
| - <a href="faq.html" title="Google Chrome Extensions FAQ">FAQ</a>
|
| - </li>
|
| <li id="group_link">
|
| - <a href="http://groups.google.com/group/chromium-extensions" title="Chromium-Extensions group">Group</a>
|
| + <a href="http://groups.google.com/group/chromium-extensions" title="Google Chrome Extensions mailing list">Group</a>
|
| + </li>
|
| + <li id="samples_link">
|
| + <a href="samples.html" title="Google Chrome Extensions samples">Samples</a>
|
| </li>
|
| + <!--
|
| <li id="terms_link">
|
| Terms
|
| </li>
|
| + -->
|
| </ul>
|
| </div> <!-- end gc-topnav -->
|
|
|
| @@ -416,13 +410,14 @@ learn about the
|
| </p><pre>hello.html
|
| ==========
|
| <html>
|
| - <button id="button">click me</button>
|
| + <button id="mybutton">click me</button>
|
| <script>
|
| - var greeting = "hello!";
|
| - function sayGreeting() {
|
| - alert(greeting);
|
| - }
|
| - document.getElementById("button").onclick = sayGreeting;
|
| + var greeting = "hello, ";
|
| + var button = document.getElementById("mybutton");
|
| + button.person_name = "Bob";
|
| + button.addEventListener("click", function() {
|
| + alert(greeting + button.person_name + ".");
|
| + }, false);
|
| </script>
|
| </html></pre>
|
|
|
| @@ -430,12 +425,13 @@ learn about the
|
|
|
| </p><pre>contentscript.js
|
| ================
|
| -console.log(greeting); // undefined
|
| -console.log(sayGreeting); // undefined
|
| -console.log(document.getElementById("button").onclick); // still undefined
|
| -document.getElementById("button").onclick = function() {
|
| - alert("hola!");
|
| -}</pre>
|
| +var greeting = "hola, ";
|
| +var button = document.getElementById("mybutton");
|
| +button.person_name = "Roberto";
|
| +button.addEventListener("click", function() {
|
| + alert(greeting + button.person_name + ".");
|
| +}, false);
|
| +</pre>
|
|
|
| <p>Now, if the button is pressed, you will see both greetings.
|
|
|
| @@ -474,7 +470,7 @@ document.getElementById('myCustomEventDiv').addEventListener('myCustomEvent', fu
|
|
|
| <h2 id="security-considerations">Security considerations</h2>
|
|
|
| -When writing a content script, you should be aware of two security issues.
|
| +<p>When writing a content script, you should be aware of two security issues.
|
| First, be careful not to introduce security vulnerabilities into the web site
|
| your content script is injected into. For example, if your content script
|
| receives content from another web site (e.g., by <a href="messaging.html">asking your background page to make an
|
| @@ -483,7 +479,7 @@ scripting</a> attacks before injecting the content into the current page.
|
| For example, prefer to inject content via innerText rather than innerHTML.
|
| Be especially careful when retrieving HTTP content on an HTTPS page because
|
| the HTTP content might have been corrupted by a network <a href="http://en.wikipedia.org/wiki/Man-in-the-middle_attack">"man-in-the-middle"</a>
|
| -if the user is on a hostile network.<p></p>
|
| +if the user is on a hostile network.</p>
|
|
|
| <p>Second, although running your content script in an isolated world provides
|
| some protection from the web page, a malicious web page might still be able
|
|
|