Bug 866522 Comment 102 Edit History

Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.

Original comment by
on
(Hidden by Administrator)
Revision 1 by
on 
I tried to make an extension using WebExtension API to add hashes of bookmarklet sources, but I missed that: javascript protocol can't be allowed with CSP source-hash.

That means we can't use bookmarklets without executing it in a special context like https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Content_scripts (thing we can't do with WebExtension) or without change the CSP spec about handling javascript protocol (allow using source-hash)

https://github.com/mems/csp-for-bookmarklets

Back to Bug 866522 Comment 102