I keep getting boilerplate responses with no information on what needs to change. No notes, and no additional information just a rejection with the same failures as last time.
Policy 2.8
Your Extension is attempting to load external files, either from a CDN or other private server, and this will cause your Extension to not function in production. Please make sure that all files that are required by your Extension to function are included in your upload.
Policy 2.9
Your Extension includes HTML files that are not correctly loading the Twitch Extension Helper. Either it is not present, or it is not being loaded first. Please make sure that the Twitch Extension Helper is included from our CDN and is being loaded before all other Javascript within each HTML file of your upload.
<script src=“https://code.jquery.com/jquery-3.3.1.min.js” integrity=“sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=” crossorigin=“anonymous”></script> -->
Previous Failures & Responses
Policy 2.8
Your Extension is attempting to load external files, either from a CDN or other private server, and this will cause your Extension to not function in production. Please make sure that all files that are required by your Extension to function are included in your upload.
Response
The only external files we load are images relating state of the extension at the time of the viewer. These images obviously cannot be loaded as part of the enxtension files, as they will not be known at the time of review / publication. Other extensions load images from 3rd parties, sich as twitter feeds, and instagram feeds. I have also been informed that policy 2.8 only relates to script files, and not images. We do not load any external script files, all scripts are included as part of the extension manifest.
Policy 2.9
Your Extension includes HTML files that are not correctly loading the Twitch Extension Helper. Either it is not present, or it is not being loaded first. Please make sure that the Twitch Extension Helper is included from our CDN and is being loaded before all other Javascript within each HTML file of your upload.
<script src=“https://code.jquery.com/jquery-3.3.1.min.js” integrity=“sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8=” crossorigin=“anonymous”></script>
Including the script file as stated above causes the browser to fail to load jQuery, the error is as follows:
Refused to load the script ‘https://code.jquery.com/jquery-3.3.1.min.js’ because it violates the following Content Security Policy directive: “script-src ‘self’ https://qfo4cabtj30xwc9isonpmdpevbkm2c.ext-twitch.tv https://extension-files.twitch.tv https://www.google-analytics.com”. Note that ‘script-src-elem’ was not explicitly set, so ‘script-src’ is used as a fallback.
Therefore we have included the jquery script as part of the manifest an load it with the following line
<script src=“jquery-3.3.1.min.js”></script>