Step 5: Add Images From the Web

Published on Updated on


Important: Chrome will be removing support for Chrome Apps on all platforms. Chrome browser and the Chrome Web Store will continue to support extensions. Read the announcement and learn more about migrating your app.

Want to start fresh from here? Find the previous step's code in the reference code zip under cheat_code > solution_for_step4.

In this step, you will learn:

  • How to load resources from outside your app and add them to the DOM through XHR and ObjectURLs.

Estimated time to complete this step: 20 minutes.
To preview what you will complete in this step, jump down to the bottom of this page ↓.

How CSP affects the use of external resources #

The Chrome Apps platform forces your app to be fully compliant with Content Security Policies (CSP). You can't directly load DOM resources like images, fonts, and CSS from outside of your Chrome App package.

If you want to show an external image in your app, you need to request it via XMLHttpRequest, transform it into a Blob, and create an ObjectURL. This ObjectURL can be added to the DOM because it refers to an in-memory item in the context of the app.

Show thumbnail images for todo items #

Let's change our app to look for image URLs in a todo item. If the URL looks like an image (for example, ends with .png, .jpg, .svg, or .gif), apply the process mentioned above in order to show an image thumbnail next to the URL.

Update permissions #

In a Chrome App, you can make XMLHttpRequest calls to any URL as long as you specify its domain in the manifest. Since you won't know beforehand what image URL the user will type, ask permission to make requests to "<all_urls>".

In manifest.json, request the "<all_urls>" permission:

"permissions": ["storage", "alarms", "notifications",
"webview", "<all_urls>"],

Create and clear ObjectURLs #

In controller.js, add a _createObjectURL() method to create ObjectURLs from a Blob:

Controller.prototype._createObjectURL = function(blob) {
var objURL = URL.createObjectURL(blob);
this.objectURLs = this.objectURLs || [];
return objURL;

ObjectURLs hold memory, so when you no longer need the ObjectURL, you should revoke them. Add this _clearObjectURL() method to controller.js to handle that:

Controller.prototype._clearObjectURL = function() {
if (this.objectURLs) {
this.objectURLs.forEach(function(objURL) {
this.objectURLs = null;

Make a XHR request #

Add a _requestRemoteImageAndAppend() method to execute a XMLHttpRequest on a given image URL:

Controller.prototype._requestRemoteImageAndAppend = function(imageUrl, element) {
var xhr = new XMLHttpRequest();'GET', imageUrl);
xhr.responseType = 'blob';
xhr.onload = function() {
var img = document.createElement('img');
img.setAttribute('data-src', imageUrl);
img.className = 'icon';
var objURL = this._createObjectURL(xhr.response);
img.setAttribute('src', objURL);

On XHR load, this method creates an ObjectURL from the XHR's response, and adds an <img> element with this ObjectURL to the DOM.

Parse for image URLs in todo items #

Now add a _parseForImageURLs() method that finds all links not yet processed and checks them for images. For each URL that looks like an image, execute _requestRemoteImageAndAppend():

Controller.prototype._parseForImageURLs = function () {
// remove old blobs to avoid memory leak:
var links = this.$todoList.querySelectorAll('a[data-src]:not(.thumbnail)');
var re = /\.(png|jpg|jpeg|svg|gif)$/;
for (var i = 0; i<links.length; i++) {
var url = links[i].getAttribute('data-src');
if (re.test(url)) {
this._requestRemoteImageAndAppend(url, links[i]);

Render thumbnails in the todo list #

Now call _parseForImageURLs() from showAll(), showActive(), and showCompleted():

* An event to fire on load. Will get all items and display them in the
* todo-list

Controller.prototype.showAll = function () { (data) {
this.$todoList.innerHTML = this._parseForURLs(;

* Renders all active tasks

Controller.prototype.showActive = function () {{ completed: 0 }, function (data) {
this.$todoList.innerHTML = this._parseForURLs(;

* Renders all completed tasks

Controller.prototype.showCompleted = function () {{ completed: 1 }, function (data) {
this.$todoList.innerHTML = this._parseForURLs(;

Do the same for editItem():

Controller.prototype.editItem = function (id, label) {
var onSaveHandler = function () {
if (value.length && !discarding) {
label.innerHTML = this._parseForURLs(value);
} else if (value.length === 0) {

Constrain the displayed image dimensions #

Finally, in bower_components/todomvc-common/base.css, add a CSS rule to limit the size of the image:

.thumbnail img[data-src] {
max-width: 100px;
max-height: 28px;

Launch your finished Todo app #

You are done Step 5! Reload your app and add a todo item with a URL to an image hosted online. Some URLs you could use: or

Tip: For real-world situations, when you need to control offline cache and dozens of simultaneous resource downloads, we have created a helper library to handle some common use cases.

For more information #

For more detailed information about some of the APIs introduced in this step, refer to:

Ready to continue onto the next step? Go to Step 6 - Export todos to the filesystem »

We serve cookies on this site to analyze traffic, remember your preferences, and optimize your experience.