otto JavaScript Security

manifest.json

{
  "update_url": "https://clients2.google.com/service/update2/crx",
  "version": "1.3.5",
  "manifest_version": 2,
  "name": "otto JavaScript Security",
  "background": {
    "page": "background.html",
    "persistent": true
  },
  "browser_action": {
    "default_title": "otto for Chrome",
    "default_popup": "popup.html"
  },
  "icons": {
    "16": "images/otto-16.png",
    "32": "images/otto-32.png",
    "192": "images/otto-192.png"
  },
  "content_scripts": [
    {
      "run_at": "document_start",
      "matches": [
        "<all_urls>"
      ],
      "all_frames": true,
      "js": [
        "content.js"
      ]
    }
  ],
  "web_accessible_resources": [
    "blocked.html",
    "validating.html",
    "filters/*.filter",
    "img/*.png",
    "latest_versions/*",
    "report.js",
    "sandbox.html",
    "resources/*",
    "detection/script.js",
    "csp.html"
  ],
  "content_security_policy": "script-src 'self' 'unsafe-eval'  https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com; object-src 'self'",
  "permissions": [
    "activeTab",
    "webRequest",
    "webNavigation",
    "webRequestBlocking",
    "privacy",
    "storage",
    "<all_urls>"
  ]
}