Tune match patterns and run_at, watch the script inject (or not) into a fake page,
and see why the isolated world keeps your variables separate from the page's.
2 items · $48.00. This is the page's own DOM. A matching content script can read and rewrite it.
Content script and page share the DOM but have separate JS scopes. A variable set in one is invisible to the other — that's the isolated world. Click run.
window.__secret = "from-extension";
const el = document.querySelector("h3");
el.textContent += " ✓ touched";
console.log(window.__secret);
// can the page see the extension var?