New Extensions policy for Content Security Policy (CSP) directives and timeline for enforcement

Well in that case such an Extension should never have been able to pass review, as all JS content MUST be loaded from Twitch’s CDN with the exception of Google Analytics and the Extension helper. That’s not a new thing with the recent CSP changes, that’s how it has always intended to have been.

If Facebook offers no option to store those js libraries within your Extension, you should either use a different service that does comply with the guidelines, or I suggest creating a UserVoice to request that feature as loading external JS is a separate thing from this recent CSP change. Developers: Top (624 ideas) – Twitch UserVoice

1 Like