Sentry code triggering violation from Google manifest v3 during publication

[rodolfoBee]

Is there an existing issue for this?

• I have checked for existing issues https://github.com/getsentry/sentry-javascript/issues
• I have reviewed the documentation https://docs.sentry.io/
• I am using the latest SDK release https://github.com/getsentry/sentry-javascript/releases

How do you use Sentry?

Sentry Saas (sentry.io)

Which SDK are you using?

@sentry/browser

SDK Version

8.9.1

Framework Version

No response

Link to Sentry event

No response

Reproduction Example/SDK Setup

No response

Steps to Reproduce

NA

Expected Result

No violation is to be triggered when using the NPM package as described here: https://docs.sentry.io/platforms/javascript/best-practices/shared-environments/

Actual Result

Violation report:

Technical Requirements - Additional Requirements for Manifest V3:
Violation:
Including remotely hosted code in a Manifest V3 item.
and
Having obfuscated code in the package.
Violating Content:
Code snippet:

 assets/index.html-wmZQQl7D.js: unction
getScriptURL(ar) { const rr = getClient(), cr = rr &&
rr.getOptions(), lr = cr && cr.cdnBaseUrl ||
"https://browser.sentry-cdn.com"; return new
URL(`/${SDK_VERSION}/${ar}.min.js`, lr).toString() } fr =
getScriptURL(cr), dr = WINDOW$4.document.
createElement("script"); dr.src = fr,"

It seems to be from this file: https://github.com/getsentry/sentry-javascript/blob/develop/packages/browser/src/utils/lazyLoadIntegration.ts

[Lms24]

We need more information to debug this:

• What kind of application is the SDK used in? A browser extension?
• How is this reproducible?