3 ms·

Tangential question: neither McDiarmid's "Kill Sticky Headers" [0] nor its improved version [1] work on this website. Does anyone know how the bookmarklet can b

Tangential question: neither McDiarmid's "Kill Sticky Headers" [0] nor its improved version [1] work on this website. Does anyone know how the bookmarklet can be changed to work here? [0] https://alisdair.mcdiarmid.org/kill-sticky-headers https://alisdair.mcdiarmid.org/kill-sticky-headers [1] https://news.ycombinator.com/item?id=19962875 https://news.ycombinator.com/item?id=19962875

fiddlerwoaroof 7y ago
Is the bookmarklet being blocked by a CSP? There should be an error in the console about that (on chrome, at least)
- smnrchrds 7y ago
  Indeed it is. So I guess there is no way around it?
  - Someone1234 7y ago
    A browser extension. Most can run in a context above CSP.
    - fiddlerwoaroof 7y ago
      Yeah, interestingly enough the CSP spec says that this behavior is wrong, but browser makers don’t seem to care. https://bugzilla.mozilla.org/show_bug.cgi?id=866522 https://bugzilla.mozilla.org/show_bug.cgi?id=866522 https://bugs.chromium.org/p/chromium/issues/detail?id=233903 https://bugs.chromium.org/p/chromium/issues/detail?id=233903
      - bzbarsky 7y ago
        We do in fact care. I put up a fix on https://bugzilla.mozilla.org/show_bug.cgi?id=1478037 https://bugzilla.mozilla.org/show_bug.cgi?id=1478037 just yesterday which will make https://alisdair.mcdiarmid.org/kill-sticky-headers https://alisdair.mcdiarmid.org/kill-sticky-headers work in Firefox no matter what the CSP says. I fully expect to get that landed sometime in the next few weeks. Making CSP not affect bookmarklets at all (as opposed to not affecting whether they execute) is a different situation entirely, because bookmarklets by definition execute in the JS environment of the page (unlike extensions, say), so it's not really possible to tell apart things that the bookmarklet does from things the page does. For example, what should happen if the bookmarklet calls a page-defined function that then does a subresource load? What if a bookmarklet defines a function to do a subresource load that the page later calls? Note that from the point of view of the JavaScript engine the functions the bookmarklet defines and the ones the page defines are indistinguishable from each other...
        smnrchrds 7y ago
        That's awesome! Thank you!
        fiddlerwoaroof 7y ago
        Sorry, I was a bit frustrated with how long that (and similar bugs in other browsers) have been open without resolution.
        bzbarsky 7y ago
        I can understand that, for sure!
- deleted 7y ago
  [deleted]
draw_down 7y ago
This is the top comment, in this comment thread about extended validation certificates.
darkpuma 7y ago
Ublock Origin's "zap" tool works on it, and you can make the change permanent by creating a cosmetic filter for '##.container.header_block'
- the_pwner224 7y ago
  In the uBO settings you can bind Zap to a keyboard shortcut. I use ctrl-shift-f. Quite useful.
illnewsthat 7y ago
I recommend adding this filter to uBlock Origin: https://raw.githubusercontent.com/yourduskquibbles/webannoyances/master/ultralist.txt https://raw.githubusercontent.com/yourduskquibbles/webannoya... It blocked the sticky header for me on this site no problem. > Description: Web Annoyances Ultralist Sublist for CSS element modifications - Modify site elements that block screen real estate - Primarily used to "pin-in-place" sticky headers, dickbars, floating headers, floating videos, scrolling headers, scrolling videos, stickynavs and other distracting page elements.

fiddlerwoaroof 7y ago

Is the bookmarklet being blocked by a CSP? There should be an error in the console about that (on chrome, at least)

smnrchrds 7y ago
Indeed it is. So I guess there is no way around it?
- Someone1234 7y ago
  A browser extension. Most can run in a context above CSP.
  - fiddlerwoaroof 7y ago
    Yeah, interestingly enough the CSP spec says that this behavior is wrong, but browser makers don’t seem to care. https://bugzilla.mozilla.org/show_bug.cgi?id=866522 https://bugzilla.mozilla.org/show_bug.cgi?id=866522 https://bugs.chromium.org/p/chromium/issues/detail?id=233903 https://bugs.chromium.org/p/chromium/issues/detail?id=233903
    - bzbarsky 7y ago
      We do in fact care. I put up a fix on https://bugzilla.mozilla.org/show_bug.cgi?id=1478037 https://bugzilla.mozilla.org/show_bug.cgi?id=1478037 just yesterday which will make https://alisdair.mcdiarmid.org/kill-sticky-headers https://alisdair.mcdiarmid.org/kill-sticky-headers work in Firefox no matter what the CSP says. I fully expect to get that landed sometime in the next few weeks. Making CSP not affect bookmarklets at all (as opposed to not affecting whether they execute) is a different situation entirely, because bookmarklets by definition execute in the JS environment of the page (unlike extensions, say), so it's not really possible to tell apart things that the bookmarklet does from things the page does. For example, what should happen if the bookmarklet calls a page-defined function that then does a subresource load? What if a bookmarklet defines a function to do a subresource load that the page later calls? Note that from the point of view of the JavaScript engine the functions the bookmarklet defines and the ones the page defines are indistinguishable from each other...
      - smnrchrds 7y ago
        That's awesome! Thank you!
      - fiddlerwoaroof 7y ago
        Sorry, I was a bit frustrated with how long that (and similar bugs in other browsers) have been open without resolution.
        bzbarsky 7y ago
        I can understand that, for sure!
deleted 7y ago
[deleted]

draw_down 7y ago

This is the top comment, in this comment thread about extended validation certificates.

darkpuma 7y ago

Ublock Origin's "zap" tool works on it, and you can make the change permanent by creating a cosmetic filter for '##.container.header_block'

the_pwner224 7y ago
In the uBO settings you can bind Zap to a keyboard shortcut. I use ctrl-shift-f. Quite useful.

illnewsthat 7y ago

I recommend adding this filter to uBlock Origin: https://raw.githubusercontent.com/yourduskquibbles/webannoyances/master/ultralist.txt https://raw.githubusercontent.com/yourduskquibbles/webannoya... It blocked the sticky header for me on this site no problem. > Description: Web Annoyances Ultralist Sublist for CSS element modifications - Modify site elements that block screen real estate - Primarily used to "pin-in-place" sticky headers, dickbars, floating headers, floating videos, scrolling headers, scrolling videos, stickynavs and other distracting page elements.