Extension Failing Review


#1

I keep getting boilerplate responses with no information on what needs to change. No notes, and no additional information just a rejection with the same failures as last time.

Policy 2.8
Your Extension is attempting to load external files, either from a CDN or other private server, and this will cause your Extension to not function in production. Please make sure that all files that are required by your Extension to function are included in your upload.
Policy 2.9
Your Extension includes HTML files that are not correctly loading the Twitch Extension Helper. Either it is not present, or it is not being loaded first. Please make sure that the Twitch Extension Helper is included from our CDN and is being loaded before all other Javascript within each HTML file of your upload.

<script src=“https://code.jquery.com/jquery-3.3.1.min.js” integrity=“sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=” crossorigin=“anonymous”></script> -->


Previous Failures & Responses

Policy 2.8

Your Extension is attempting to load external files, either from a CDN or other private server, and this will cause your Extension to not function in production. Please make sure that all files that are required by your Extension to function are included in your upload.

Response

The only external files we load are images relating state of the extension at the time of the viewer. These images obviously cannot be loaded as part of the enxtension files, as they will not be known at the time of review / publication. Other extensions load images from 3rd parties, sich as twitter feeds, and instagram feeds. I have also been informed that policy 2.8 only relates to script files, and not images. We do not load any external script files, all scripts are included as part of the extension manifest.


Policy 2.9

Your Extension includes HTML files that are not correctly loading the Twitch Extension Helper. Either it is not present, or it is not being loaded first. Please make sure that the Twitch Extension Helper is included from our CDN and is being loaded before all other Javascript within each HTML file of your upload.

<script src=“https://code.jquery.com/jquery-3.3.1.min.js” integrity=“sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=” crossorigin=“anonymous”></script>

Including the script file as stated above causes the browser to fail to load jQuery, the error is as follows:

Refused to load the script ‘https://code.jquery.com/jquery-3.3.1.min.js’ because it violates the following Content Security Policy directive: “script-src ‘self’ https://qfo4cabtj30xwc9isonpmdpevbkm2c.ext-twitch.tv https://extension-files.twitch.tv https://www.google-analytics.com”. Note that ‘script-src-elem’ was not explicitly set, so ‘script-src’ is used as a fallback.

Therefore we have included the jquery script as part of the manifest an load it with the following line

<script src=“jquery-3.3.1.min.js”></script>



#2

Without seeing the code for your extension not sure.

Looks like the primary issue was jQuery which you seem to have fixed.

So if you are loading images from your EBS. Make sure those images are loaded over SSL. And make a note about these images in your change log.


#3

Hi Barry,

All Images are loaded over HTTPS, they are still rejecting me on the jQuery issue. I’m beginning to think there is no one on the other end of this review, and it’s some automated bot.

I could add your channel as a test account so you can load if you want to take a look?

Many Thanks,
Ady