Bookmarklet doesn't work on some sites

[NerosTie]

If I want to share a link from github using the bookmark, nothing happen. It works well everywhere else.

[pikzen]

GitHub activated CSP (Content Security Policy) a while ago now, every browser basically breaks javascript: URIs when CSP is on. See https://github.com/blog/1477-content-security-policy ,section Shortcomings.

Workaround (Firefox): go to about:config, set security.csp.enable to false. Do not do that.

[Marsup]

The Firefox extension works fine. Probably Chrome's too.

[NerosTie]

@pikzen nothing we can do?

@Marsup I prefer the bookmark for some reasons, but good to know!

[pikzen]

Nothing that I know of. Submitting a PR to Firefox maybe :D

I'll look around but AFAIK CSP is pretty broken

[nodiscc]

There is no way around CSP, except disabling it ( security.csp.enable), which is a bad idea for security reasons.

You can read more about this problem at sebsauvage#94. This is a browser bug: read https://bugzilla.mozilla.org/show_bug.cgi?id=866522 (by the CSP spec, bookmarklets shouldn't be affected, but they are).

I'll leave this bug open for some time, in case there is more info to add. I think a Question/Answer should be added to the FAQ in the wiki.

[nodiscc]

Closing. This is a browser bug.

[nodiscc]

Reopening because this should be documented on the wiki. Feel free to edit the doc.

[ArthurHoaro]

Documentation added.

EDIT 2018-02-07 by @virtualtam: documentation has moved to ReadTheDocs

[virtualtam]

Documentation: https://shaarli.readthedocs.io/en/master/Bookmarklet/