3 ms·
It's great that anyone can just drag drop bookmarklet from website into bookmark bar and just use it without any restrictions, unlike extensions. No signing and
by butz 6y ago
It's great that anyone can just drag drop bookmarklet from website into bookmark bar and just use it without any restrictions, unlike extensions. No signing and uploading to "extension store".
- extra88 6y agoSuper-strict CSP can prevent bookmarklets from working.
- bariumbitmap 6y agoIndeed. The "should not" in the spec is a big loophole. https://www.w3.org/Bugs/Public/show_bug.cgi?id=23357 https://www.w3.org/Bugs/Public/show_bug.cgi?id=23357 https://medium.com/making-instapaper/bookmarklets-are-dead-d470d4bbb626 https://medium.com/making-instapaper/bookmarklets-are-dead-d... https://blog.github.com/2013-04-19-content-security-policy/ https://blog.github.com/2013-04-19-content-security-policy/ https://stackoverflow.com/questions/7607605/does-content-security-policy-block-bookmarklets https://stackoverflow.com/questions/7607605/does-content-sec...