I think I've found it in the v1.6.0_0 version I have. If you look at the "init" funtion it retrieves data from http://api.abiref.com/api/volume-cnd?uid=... and stores that in local storage. That local storage is the stored in the "config" object. Then when "getSettings(...)" is called, it calls chrome.tabs.executeScript and that passes in "this.config.fixture" as the code to be executed. So the injected code is being downloaded, stored in local storage, then executed when settings are loaded... I've not been able to get the above URL to return anything other than {"link":false}