From c980eadec70457f3713990954f43c3a3e36a6dd3 Mon Sep 17 00:00:00 2001
From: Ray Booysen <raybooysen@gmail.com>
Date: Wed, 18 Nov 2020 07:11:16 +0800
Subject: [PATCH] feat(extension): tightens the permissions for which URLs the
 extension can access (#677)

---
 extension/src/browser/extension/manifest.json | 4 +++-
 extension/src/browser/firefox/manifest.json   | 4 +++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/extension/src/browser/extension/manifest.json b/extension/src/browser/extension/manifest.json
index 604e309d..c62ae5ab 100644
--- a/extension/src/browser/extension/manifest.json
+++ b/extension/src/browser/extension/manifest.json
@@ -65,7 +65,9 @@
     "contextMenus",
     "tabs",
     "storage",
-    "<all_urls>"
+    "file:///*",
+    "http://*/*",
+    "https://*/*"
   ],
   "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'; style-src * 'unsafe-inline'; img-src 'self' data:;",
   "update_url": "https://clients2.google.com/service/update2/crx",
diff --git a/extension/src/browser/firefox/manifest.json b/extension/src/browser/firefox/manifest.json
index efbb1bb2..bceae8fc 100644
--- a/extension/src/browser/firefox/manifest.json
+++ b/extension/src/browser/firefox/manifest.json
@@ -59,7 +59,9 @@
     "contextMenus",
     "tabs",
     "storage",
-    "<all_urls>"
+    "file:///*",
+    "http://*/*",
+    "https://*/*"
   ],
   "content_security_policy": "script-src 'self'; object-src 'self'; img-src 'self' data:;"
 }