Added the eval stripper. NOTE this might not be entirely necessary

Author: adambullmer

generator/index.js

@@ -2,7 +2,7 @@ module.exports = (api, { config }) => {
   const eslintConfig = { env: { webextensions: true } }
   const pkg = {
     scripts: {
-      'ext-serve': 'vue-cli-service ext-serve'
+      'ext-serve': 'vue-cli-service ext-serve --mode development'
     },
     dependencies: {
       'vue-router': '^3.0.1',

index.js

@@ -1,6 +1,8 @@
+const path = require('path')
 const { log } = require('@vue/cli-shared-utils')
 const CopyWebpackPlugin = require('copy-webpack-plugin')
 const ChromeExtensionReloader = require('webpack-chrome-extension-reloader')
+const WebpackShellPlugin = require('webpack-shell-plugin-next')
 const { version } = require('./package.json')
 
 module.exports = (api) => {
@@ -28,6 +30,15 @@ module.exports = (api) => {
       }
     ]))
 
+    const scriptPath = path.join(__dirname, 'scripts/remove-evals.js')
+    webpackConfig.plugins.push(new WebpackShellPlugin({
+      onBuildExit: {
+        scripts: [`node ${scriptPath}`],
+        blocking: true,
+        parallel: false
+      }
+    }))
+
     if (process.env.HMR === 'true') {
       webpackConfig.plugins = (webpackConfig.plugins || []).concat([
         new ChromeExtensionReloader()

package.json

@@ -1,6 +1,6 @@
 {
   "name": "vue-cli-plugin-browser-extension",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Browser extension development plugin for vue-cli 3.0",
   "main": "index.js",
   "scripts": {
@@ -26,6 +26,7 @@
   "dependencies": {
     "@vue/cli-shared-utils": "^3.0.0-rc.3",
     "copy-webpack-plugin": "^4.5.2",
-    "webpack-chrome-extension-reloader": "^0.8.3"
+    "webpack-chrome-extension-reloader": "^0.8.3",
+    "webpack-shell-plugin-next": "https://github.com/adambullmer/webpack-shell-plugin-next.git"
   }
 }

scripts/remove-evals.js

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+
+const path = require('path')
+const fs = require('fs')
+const BUNDLE_DIR = 'dist'
+const bundles = [
+  'background.js',
+  'popup/popup.js'
+]
+
+const evalRegexForProduction = /;([a-z])=function\(\){return this}\(\);try{\1=\1\|\|Function\("return this"\)\(\)\|\|\(0,eval\)\("this"\)}catch\(t\){"object"==typeof window&&\(\1=window\)}/g
+const evalRegexForDevelopment = /;\\r\\n\\r\\n\/\/ This works in non-strict mode(?:.){1,304}/g
+
+const removeEvals = (file) => {
+  return new Promise((resolve, reject) => {
+    fs.readFile(file, 'utf8', (err, data) => {
+      if (err) {
+        reject(err)
+        return
+      }
+
+      const regex = process.env.NODE_ENV === 'production' ? evalRegexForProduction : evalRegexForDevelopment
+
+      if (!regex.test(data)) {
+        resolve(`No CSP specific code found in ${file}.`)
+        return
+      }
+
+      data = data.replace(regex, '=window;')
+
+      fs.writeFile(file, data, (err) => {
+        if (err) {
+          reject(err)
+          return
+        }
+
+        resolve()
+      })
+    })
+  })
+}
+
+const main = () => {
+  bundles.forEach(bundle => {
+    removeEvals(path.join(BUNDLE_DIR, bundle))
+      .catch(console.error)
+  })
+}
+
+main()

yarn.lock

@@ -146,6 +146,21 @@ babel-code-frame@^6.26.0:
     esutils "^2.0.2"
     js-tokens "^3.0.2"
 
+babel-polyfill@^6.26.0:
+  version "6.26.0"
+  resolved "https://registry.yarnpkg.com/babel-polyfill/-/babel-polyfill-6.26.0.tgz#379937abc67d7895970adc621f284cd966cf2153"
+  dependencies:
+    babel-runtime "^6.26.0"
+    core-js "^2.5.0"
+    regenerator-runtime "^0.10.5"
+
+babel-runtime@^6.26.0:
+  version "6.26.0"
+  resolved "https://registry.yarnpkg.com/babel-runtime/-/babel-runtime-6.26.0.tgz#965c7058668e82b55d7bfe04ff2337bc8b5647fe"
+  dependencies:
+    core-js "^2.4.0"
+    regenerator-runtime "^0.11.0"
+
 balanced-match@^1.0.0:
   version "1.0.0"
   resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-1.0.0.tgz#89b4d199ab2bee49de164ea02b89ce462d71b767"
@@ -324,6 +339,10 @@ copy-webpack-plugin@^4.5.2:
     p-limit "^1.0.0"
     serialize-javascript "^1.4.0"
 
+core-js@^2.4.0, core-js@^2.5.0:
+  version "2.5.7"
+  resolved "https://registry.yarnpkg.com/core-js/-/core-js-2.5.7.tgz#f972608ff0cead68b841a16a932d0b183791814e"
+
 core-util-is@1.0.2, core-util-is@~1.0.0:
   version "1.0.2"
   resolved "https://registry.yarnpkg.com/core-util-is/-/core-util-is-1.0.2.tgz#b5fd54220aa2bc5ab57aab7140c940754503c1a7"
@@ -1472,6 +1491,14 @@ read-pkg@^2.0.0:
     string_decoder "~1.1.1"
     util-deprecate "~1.0.1"
 
+regenerator-runtime@^0.10.5:
+  version "0.10.5"
+  resolved "https://registry.yarnpkg.com/regenerator-runtime/-/regenerator-runtime-0.10.5.tgz#336c3efc1220adcedda2c9fab67b5a7955a33658"
+
+regenerator-runtime@^0.11.0:
+  version "0.11.1"
+  resolved "https://registry.yarnpkg.com/regenerator-runtime/-/regenerator-runtime-0.11.1.tgz#be05ad7f9bf7d22e056f9726cee5017fbf19e2e9"
+
 regexp.prototype.flags@^1.2.0:
   version "1.2.0"
   resolved "https://registry.yarnpkg.com/regexp.prototype.flags/-/regexp.prototype.flags-1.2.0.tgz#6b30724e306a27833eeb171b66ac8890ba37e41c"
@@ -1885,6 +1912,12 @@ webpack-chrome-extension-reloader@^0.8.3:
     webpack-sources "^1.0.1"
     ws "^3.3.3"
 
+"webpack-shell-plugin-next@https://github.com/adambullmer/webpack-shell-plugin-next.git":
+  version "0.6.3"
+  resolved "https://github.com/adambullmer/webpack-shell-plugin-next.git#bfad45409bacb6f1554fce8909dd1326fa05a7f7"
+  dependencies:
+    babel-polyfill "^6.26.0"
+
 webpack-sources@^1.0.1:
   version "1.1.0"
   resolved "https://registry.yarnpkg.com/webpack-sources/-/webpack-sources-1.1.0.tgz#a101ebae59d6507354d71d8013950a3a8b7a5a54"