{
  "name": "ttsEngine -> Reading Mode WebUI script injection POC",
  "description": "POC: extension with only the ttsEngine permission injects JS into chrome-untrusted://read-anything-side-panel.top-chrome via unsanitized lang concatenation in ReadAnythingAppController::OnGetVoicePackInfo",
  "version": "1.0",
  "manifest_version": 3,
  "permissions": ["ttsEngine"],
  "background": {
    "service_worker": "sw.js"
  },
  "tts_engine": {
    "voices": [
      {
        "voice_name": "POC Voice",
        "lang": "en-US",
        "event_types": ["start", "end", "error"]
      }
    ]
  }
}