title: Chome Extension - Check API
body: <p>I'm trying write an extension which runs whenever you visit a steam profile. The extension gets the profile's ID, and should then call my database to check if they are a scammer, trusted middleman, etc.
  I have written a version which works perfectly, however it has been denied by Google:</p>
  
  <blockquote>
    <p>We routinely review items in the Chrome Web Store for compliance with
    our Program policies to ensure a safe and trusted experience for our
    users. Per our policies, where possible, make as much of your code
    visible in the package as you can. If some of your app's logic is
    hidden and it appears to be suspicious, we may remove it.</p>
    
    <p>Your item was found to have requested/fetched one or more external
    scripts. An example of one such instance in your item was found in
    check.js line 18.</p>
    
    <p>To have your item reinstated, please make any necessary changes to
    ensure:</p>
    
    <p>All of the files and code are included in the item’s package. Avoid
    requesting or executing remotely hosted code (including by referencing
    remote javascript files or executing code obtained by XHR requests).</p>
  </blockquote>
  
  <p>The line of code in question is this:</p>
  
  <pre><code>fetch("https://www.example.com/check.php?id=" + id)
  </code></pre>
  
  <p>Is there a better/correct way of doing this that would be allowed in a web extension?</p>
  
  <p>Thanks in advance.</p>