Content security policy issue in firefox extension

Add-ons Development
#1

here is is the error in console
The character encoding of the HTML document was not declared. The document will render with garbled text in some browser configurations if the document contains characters from outside the US-ASCII range. The character encoding of the page must be declared in the document or in the transfer protocol. popup.html

Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). 3 jquery.min.js:4:30049

Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). 3 jquery.min.js:4:30167

Content Security Policy: The page’s settings blocked the loading of a resource at https://graph.facebook.com/me?EAAJQJenxxwgBADRaMzPfANB7j6Y5x…U2WwgDHLrhixhbYKwAqhYEVT86BDmu3hG6SPEZD&callback=displayUser (“script-src”). popup.js:7:18
I’m pretty sure that firefox is blocking some of my extensions requests but i have no idea how to sort this out
i have tried figuring this our from various sources
https://developer.chrome.com/extensions/contentSecurityPolicy#resourceLoading


but the thing is its not that clear and i have no idea where to implemen that part so that firefox wont block my request

#2

So the two “loading of a resource at inline” are probably event listeners that aren’t added with .on/.one. If it’s something else it’s hard to say without seeing your code.

The last one looks like you’re trying to load a facebook API as a script instead of querying the API with fetch (or XHR). Possibly by telling jquery to do a JSONP request?

#3

please you can have a look at the code part
in this link