Is including an iframe with a web extension considered remote code?

Viewed 252

While submitting an extension to the Chrome Store this question is asked regarding remote code:

("All JS, Wasm or CSS that are not part of the administration package are remote code. This also includes references to external processes in tags, modules that refer to external personal and strings determined via "eval ()".)

In the case of my extension I don't use eval(), or directly inject other scripts libraries, I just put an iframe that will have its own libraries.

Should I report this behavior remote-code?

Code to add the data

const iframe = document.createElement('iframe')
iframe.src = `URL STRING`
iframe.id = 'Frame'

document.body.appendChild(style)
document.body.appendChild(iframe)
0 Answers
Related