Skip to content
Open
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions docs/guide/essentials/remote-code.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,10 @@

WXT will automatically download and bundle imports with the `url:` prefix so the extension does not depend on remote code, [a requirement from Google for MV3](https://developer.chrome.com/docs/extensions/migrating/improve-security/#remove-remote-code).

## Deprecated

See [github issue](https://github.com/wxt-dev/wxt/issues/2262).

Comment thread
aklinker1 marked this conversation as resolved.
Outdated
## Google Analytics

For example, you can import Google Analytics:
Expand Down
2 changes: 2 additions & 0 deletions packages/wxt/src/core/builders/vite/plugins/download.ts
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ import { fetchCached } from '../../../utils/network';
* they are bundled with the extension instead of depending on remote code at
* runtime.
*
* @deprecated Don't use this, it can cause potential supply chain attacks. You
* can download the files and host it in your repo instead.
* @example
* import 'url:https://google-tagmanager.com/gtag?id=XYZ';
*/
Expand Down
Loading