[codegladiator]

How did chrome webstore team approve use of eval/new function in chrome plugin ? Isn't that against their tos ?

  Execute JavaScript code in the context of the current page

[SquareWheel]

Not having looked at the extension, I would assume they use the chrome.scripting API in MV3.

https://developer.chrome.com/docs/extensions/reference/api/s...

https://developer.chrome.com/blog/crx-scripting-api

[miki_oomiri]

No, this can't be used for remote code. Only existing local code.

[anamexis]

Doesn’t basically every Chrome extension execute JavaScript in the context of the page?

[codegladiator]

That's the javascript included in the plugin crx. This is about code retrieved over API being executed (so that code being run cannot be approved by chrome webstore team)

[miki_oomiri]

I don't think they mean executing locally JS code generated server-side.

[codegladiator]

Its a "tool call" definition in their code named 'execute_javascript', which takes in a "code" parameter and executes it. The code here being provided by the LLM which is not sitting locally. So that code is not present "in the plugin binary" at the time when chrome store team is reviewing it.