{
  "name": "POC Victim Extension",
  "version": "1.0",
  "manifest_version": 3,
  "description": "Victim extension with css-only PageStateMatcher + RequestContentScript and NO host permissions for the attacker origin.",
  "permissions": ["declarativeContent"],
  "host_permissions": ["https://example.com/*"],
  "action": {},
  "background": {
    "service_worker": "background.js"
  }
}