title: Content Security Policy error, without any inline javascript
body: <p>I've been seeing this error while I try to load my chrome extension:</p>
  
  <p><code>Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' https://ajax.googleapis.com".</code> </p>
  
  <p>Here is part of my <strong>manifest.json</strong>:</p>
  
  <pre><code>...
  
   "background": {
   "scripts": ["launcher.js"]
       },
  "options_page": "options.html",
  "content_security_policy": "script-src 'self' https://ajax.googleapis.com; object-src 'self'",
  "permissions": [
  "tabs", "notifications", "http://*/*", "https://*/*"
  
  ...
  </code></pre>
  
  <p>In whole of my javascript I've only been communicating with <a href="https://ajax.googleapis.com" rel="nofollow">https://ajax.googleapis.com</a> and I've ensured with the <strong>Network</strong> tab of <strong>Inspect views</strong>.</p>
  
  <p>And I've verified all my javascript code sits inside my <strong>.js</strong> file only. (And yes I'm using <strong>addEventListener()</strong> wherever necessary.</p>
  
  <p>Any suggestions?</p>
  
  <p><strong>UPDATE:</strong> Showing code responsible for the error (asked by Rob)
  This is the only place where I'm communicating with ANY server:</p>
  
  <pre><code>....
  $.ajax({
          type: "get",
          url: "https://ajax.googleapis.com/ajax/services/feed/load?v=1.0&amp;num=" + storyCount + "&amp;callback=?",
          data: {
                  q: link,
                  output: "json_xml"
               },
          async: false,
          dataType: "json",
          success: function (data) {
               if (data.responseStatus == 200) {
                  //process JSON
                }
  ....
  </code></pre>