Google Search Popup 作者： L-SAKURAI

Major browsers such as Chrome enforce strict Content Security Policy (CSP) rules to prevent potential code injection vulnerabilities caused by inline event handlers.
Therefore, events should not be bound inline but instead registered via addEventListener within an external script.

This approach is also recommended when developing Firefox add-ons, as it aligns with modern security practices and contributes to maintainable, readable code.