Add CSP-compliant mode (Content Security Policy)

I might be missing something obvious here, and if so, I apologize in advance.

I expected this to work:

<div v-show="!metadata">

But it didn’t. Is there a good reason for this?

[k88hudson]

This is a significant blocker for us using vue.js in a privileged environment on FirefoxOS apps – we have a sandbox workaround, but still really sucks 😦

Personally I’d love to see CSP-compliance implemented here, I am guessing this will be a blocker on more and more projects

[luxp]

I meet this same problem in Vue@2.x. I solved it just add the page to sandbox option in manifest.json.

{
  "manifest_version": 2,
  "name": "my-tab",
  "version": "1.0",
  "chrome_url_overrides": {
    "newtab": "index.html"
  },
  "sandbox": {
    "pages": ["index.html"]
  }
}