script:matches config. However, my CSUI is still visible on every page that I go to.package.json file looks like this:externally_connectable does not request host permissions and only allows those sites to send messages to my extension? Also not sure why the CSUI is showing up everywhere.