fix: Restrict host permissions and content script matches to HTTPS only

Author: jnton

background.js

@@ -159,7 +159,7 @@ chrome.webNavigation.onCompleted.addListener(
       // injectModules(details.tabId, "webNavigation.onCompleted"); // Commented out
     }
   },
-  { url: [{ schemes: ['http','https'] }] }
+  { url: [{ schemes: ['https'] }] }
 );
 
 // 3) Message listener for updates, popup requests, AND scroll requests

manifest.json

@@ -9,7 +9,6 @@
     "webNavigation"
   ],
   "host_permissions": [
-    "http://*/*",
     "https://*/*"
   ],
   "content_security_policy": {
@@ -37,7 +36,6 @@
   "content_scripts": [
     {
       "matches": [
-        "http://*/*",
         "https://*/*"
       ],
       "js": [