Examine source code of ThirdEye — Web Security Scanner

{
  "manifest_version": 2,
  "name": "ThirdEye — Web Security Scanner",
  "short_name": "ThirdEye",
  "version": "3.1.0",
  "default_locale": "en",
  "description": "Real-time web security scanner. Detects XSS, CSRF, CSP issues, insecure cookies, vulnerable libraries, sensitive data exposure, PCI DSS compliance, and 20+ checks on every page.",
  "author": "ThirdEye Security",
  "homepage_url": "https://thirdeye-security.github.io",
  "icons": {
    "16": "assets/icons/icon16.png",
    "32": "assets/icons/icon32.png",
    "48": "assets/icons/icon48.png",
    "128": "assets/icons/icon128.png"
  },
  "browser_action": {
    "default_popup": "src/popup/popup.html",
    "default_icon": {
      "16": "assets/icons/icon16.png",
      "32": "assets/icons/icon32.png",
      "48": "assets/icons/icon48.png",
      "128": "assets/icons/icon128.png"
    },
    "default_title": "ThirdEye Security Scanner"
  },
  "background": {
    "scripts": [
      "src/background/service-worker-ff.js"
    ],
    "persistent": false
  },
  "content_scripts": [
    {
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "js": [
        "src/content/content-script.js"
      ],
      "run_at": "document_idle",
      "all_frames": false
    }
  ],
  "permissions": [
    "activeTab",
    "storage",
    "tabs",
    "webRequest",
    "scripting",
    "http://*/*",
    "https://*/*"
  ],
  "web_accessible_resources": [
    "assets/*"
  ],
  "content_security_policy": "script-src 'self'; object-src 'none'; base-uri 'none'",
  "browser_specific_settings": {
    "gecko": {
      "id": "thirdeye@thirdeye-security.github.io",
      "strict_min_version": "109.0",
      "data_collection_permissions": {
        "required": [
          "none"
        ]
      }
    }
  }
}