title: Chrome Extension: I found chrome.scripting.executeScript can execute arbitrary code from server by someway, Is this against official documents？
body: <p>I am migrating my extension to mv3. I found that when use <strong>chrome.scripting.executeScript</strong> to inject code to page, the &quot;args&quot; can come from server like this:</p>
  <pre><code>function init() {
      fetch('https://a.com/code').then(res =&gt; res.text()).then(code =&gt; {
          injectToPage(code);
      });
  }
  
  async function injectToPage(code) {
      const [tab] = await chrome.tabs.query({ currentWindow: true, active: true });
      chrome.scripting.executeScript({
          target: { tabId: tab.id },
          args: [code],
          func: code =&gt; {
              const el = document.createElement('script');
              el.textContent = code;
              document.body.appendChild(el);
              el.remove();
          },
          // chrome 95+
          world: 'MAIN',
      });
  }
  
  init();
  </code></pre>
  <p>The code works without error, and <strong>CWS</strong> also approved. I wonder，does this usage violate official documents that remotely hosted code can't load？is this usage a bug?</p>