DEV Community: Gyana Ranjan panda

Content Security Policy Nightmare

Gyana Ranjan panda — Sat, 21 May 2022 15:29:54 +0000

How a simple package can give you sleepless night

Must be thinking about how is this possible? let me give you some details first:-

Looking Scary right🥶, basically i am working on a chrome extension and everything going smooth and one day the devil arise.

The extension was basically a search enhancer Felvin :-

Like above example it provides lot of dev utilities around 72(csv to json,image crop,code reference ,corn parser,image compressor) all in your search bar.
Link:Chrome Store

So one day a new version was rolled out then suddenly it throws the above error. So figuring out among 72 apps which causes this.

Those who not aware about CSP policies by google. for them
The content security policy for Chrome Apps restricts you from doing the following:

You can't use inline scripting and event handlers like onClick
Can't use eval() and new Function()
You can't reference any external resources in any of your app files (except for video and audio resources).

So basically here second point was problem ,we can solve the problem by allowing the unsafe-eval in CSP policy but i was not optimal solution.

Ever heard about git bisect 🤔,it works on principle of binary search .In the same way i check all the packages and Bingo found the culprits and finally all sleepless night come to an end.

Learnings:-

while solving the blog i didnot purpose any hypothesis and write down any causes .so it was same as hitting the bush.
First i suspect may be webpack config causing this error,try to change its configurations as suggested in github issues and stackoverflow

So Debugging method can be summarized as:

Your Search Engine On Adrenaline

Gyana Ranjan panda — Mon, 18 Apr 2022 14:21:28 +0000

From Day of Inception,the fundamentals of search engines are still same.
They operate on the same principal by indexing the search results on the users search preferences and their ranking index.

Is this a issue?

For a mass number of users ,it is not that of a bigger deal,but what about a niche who uses search engine Like ,google on daily basis for their profession .To put it simply ,suppose a student search for merge sort,instead of giving bunch of more websites to scroll ,it won't be cool to give the snippet itself.

It is not limited to only this tiny things,basically we can level up our existing search engine to an app store, where we can exploit search pre-existing instant apps,or rather create our own for the daily problem we face.

What are instant apps?

Instant apps are the small interactive cards which you get for your search queries.

We can build instant apps for all kinds of use cases like dictionary, checking football scores, stock prices or notes from your notion or even search history from company slack or anything!
Try them out live - felvin

Everyone thinks of changing the world, but no one thinks of changing himself

As the above quote depicts mankind hate changes ,similarly we are so accustomed to our fav search engine that we hardly want to switch ,here felvin provides its browser extension which can be added on top of any of your search engine to provide more utility to your existing search engine.

here how it sugarcoats the preexisting search engine. So Opportunities are limitless ,and we are just starting out. feel free to check it out.