Indeed. The "should not" in the spec is a big loophole. https://www.w3.org/Bugs/Public/show_bug.cgi?id=23357 https://www.w3.org/Bugs/Public/show_bug.cgi?id=233

Indeed. The "should not" in the spec is a big loophole. https://www.w3.org/Bugs/Public/show_bug.cgi?id=23357 https://www.w3.org/Bugs/Public/show_bug.cgi?id=23357 https://medium.com/making-instapaper/bookmarklets-are-dead-d470d4bbb626 https://medium.com/making-instapaper/bookmarklets-are-dead-d... https://blog.github.com/2013-04-19-content-security-policy/ https://blog.github.com/2013-04-19-content-security-policy/ https://stackoverflow.com/questions/7607605/does-content-security-policy-block-bookmarklets https://stackoverflow.com/questions/7607605/does-content-sec...