Chrome extension: bitcoin wallet

Question

Could a chrome extension be made that maintains a bitcoin wallet while also making it easy for web stores to integrate a one-click purchase experience.

Suppose a button on a webpage is clicked. Is it possible for that to trigger a function call to the chrome extension to send bitcoins?

Obviously letting webpages unlimited access to chrome extensions would never have been designed. But is there some way to make this work securely?

Answer 1

Chrome extensions can insert arbitrary code into web pages (content scripts).

Content scripts are JavaScript files that run in the context of web pages. By using the standard Document Object Model (DOM), they can read details of the web pages the browser visits, or make changes to them.

This code can communicate with the original web page via the DOM and with the rest of the extension via message passing.

In theory, this should suffice. But make it secure, please.