It's great that anyone can just drag drop bookmarklet from website into bookmark... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		butz on June 7, 2020 \| parent \| context \| favorite \| on: Bookmarklets I Use It's great that anyone can just drag drop bookmarklet from website into bookmark bar and just use it without any restrictions, unlike extensions. No signing and uploading to "extension store".

extra88 on June 7, 2020 [–]

Super-strict CSP can prevent bookmarklets from working.

bariumbitmap on June 7, 2020 | [–]

Indeed. The "should not" in the spec is a big loophole.

https://www.w3.org/Bugs/Public/show_bug.cgi?id=23357

https://medium.com/making-instapaper/bookmarklets-are-dead-d...

https://blog.github.com/2013-04-19-content-security-policy/

https://stackoverflow.com/questions/7607605/does-content-sec...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact