XSS

manifest.json

{
  "update_url": "https://clients2.google.com/service/update2/crx",
  "name": "__MSG_appName__",
  "description": "__MSG_appDesc__",
  "default_locale": "en",
  "version": "1.2.0",
  "manifest_version": 2,
  "icons": {
    "16": "icon16.png",
    "48": "icon48.png",
    "128": "icon128.png"
  },
  "browser_action": {
    "default_title": "XSS",
    "default_popup": "GUI.html",
    "default_icon": "icon16.png"
  },
  "permissions": [
    "notifications",
    "contextMenus",
    "storage",
    "downloads",
    "<all_urls>"
  ],
  "content_scripts": [
    {
      "matches": [
        "<all_urls>"
      ],
      "js": [
        "extension/content.js"
      ],
      "run_at": "document_start"
    }
  ],
  "background": {
    "scripts": [
      "extension/background.js"
    ],
    "persistent": false
  },
  "options_ui": {
    "page": "options.html",
    "chrome_style": true,
    "open_in_tab": false
  }
}