{
  "manifest_version": 3,
  "name": "F009 PoC (high impact)",
  "version": "1.0",
  "description": "SharedWorker cross-origin bypass PoC — asset exfiltration demo",
  "permissions": ["storage", "cookies", "history", "bookmarks", "tabs"],
  "host_permissions": ["<all_urls>"],
  "action": {
    "default_popup": "popup.html"
  },
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'; worker-src http://127.0.0.1:8000"
  }
}