This would be more practical for the reports in Harvest.

If you search for a ticket and use the github "type ahead" feature, it will link you to a url like "*/issues/1?source=cc" and the plugin will fail with the js error:

Uncaught TypeError: Cannot read property '1' of null chrome-extension://xxx/data/index.js:11

If you remove the ?source=cc part, everything works fine again.

I have Chrome 26. The GitHub icon is not appearing, probably after last automatic update.

It may be related to an extension manifest problem with blocking the remote javascript.

In the JavaScript console I see:

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src https://github.com https://a248.e.akamai.net https://jobs.github.com https://ssl.google-analytics.com https://secure.gaug.es https://gist.github.com".

We may need to update the manifest with something like:

"content_security_policy": "script-src 'self' https://example.com; object-src 'self'"

mentioned in the "Remote Script" section of:
https://developer.chrome.com/extensions/contentSecurityPolicy.html

Hi there!

There is an exception in Chrome extension:

Refused to load the image 'https://cache.harvestapp.com/assets/platform/timer-icon.png' because it violates the following Content Security Policy directive: "img-src 'self' data: assets-cdn.github.com identicons.github.com www.google-analytics.com collector.githubapp.com *.githubusercontent.com *.gravatar.com *.wp.com".

Thank you for this awesome extension!

The icon no longer appears :(

In the latest Chrome there is a new issue:

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src https://*.harvestapp.com assets-cdn.github.com www.google-analytics.com collector-cdn.github.com". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution.

GitHub also introduced new design - so there may be a change there as well.

Workaround now is to press Ctrl-R on the page with ticket - then the tracking icon appears again.

The content security policy of github doesn't allow this extension to work. Error is:

Refused to load the script 'https://platform.harvestapp.com/assets/platform.js' because it violates the following Content Security Policy directive: "script-src 'self' https://github.global.ssl.fastly.net https://jobs.github.com https://ssl.google-analytics.com https://collector.githubapp.com https://analytics.githubapp.com".

I think there are to possible fixes:

1. Integrate the platform.js in the extension
2. Try to bypass the csp header

The new github layout has changed the class names used by the script.

Hi!

First of all, thank you for this useful extension!
Something happens on GitHub today and now I see in dev-tools this:

Refused to connect to 'https://platform.harvestapp.com/platform/subdomain.json?_=1402396408564' because it violates the following Content Security Policy directive: "connect-src 'self' ghconduit.com:25035 live.github.com uploads.github.com s3.amazonaws.com".
 platform.js:1

Uncaught SecurityError: Failed to execute 'open' on 'XMLHttpRequest': Refused to connect to 'https://platform.harvestapp.com/platform/subdomain.json?_=1402396408564' because it violates the document's Content Security Policy. 

Hi,

A safari version would be nice. Any plans for that?

Thanks