Question: We have some problems with CSP violations. Some pages like StackOverflow don’t even prompt the user for microphone permissions.
Others, like Twitter, allow specific media sources. As long as they still allow blobs, we can work around that by sending the blob as a stringified message over the chrome messaging and rebuilding it in the DOM to then play it. Github and Gitlab are much more restrictive. IMO google should allow chrome extensions to change certain aspects of the CSPs, after all, you want to transform your browser experience with the extensions. It works well on the major co-working tools like gsuite or notion, but we would really like to bring it to more engineers and the websites they use.
Did any of you deal with similar constraints before?