Facebook with Chrome error: Refused to connect to ... (loading script)

Edit Subject

Vinay,

This is happening due to the HTML5 CSP policy which facebook started implementing.
(http://www.html5rocks.com/en/tutorial...)

Instead of injecting the script from the server you will need to either fetch the code as text and inject or uses resources API:

appAPI.request.get("http://yourdomain.com/script.js", function(text) {
appAPI.dom.addInlineJS(text)
});

OR:

>> appAPI.resources.includeJS("resource.js"); // this will fetch the code from resources and use dom.addInlineJS();

Also, I've seen in my tests that this HTML5 policy is being respected currently only by Chrome and not yet by other browsers.

Shmueli,

Thanks for explaining that. Is there a work around for JSONP (which uses the same script load method) as well?

Thanks again.

Try using the chrome.webRequest API to intercept and rewrite the HTTP headers.