hypothesis
Note that the bookmarklet doesn't work on sites with restrictive CSP
E.g. clicking the bookmarklet on a private github repo results in this in the console:
Content Security Policy: The page's settings blocked the loading of a resource at self ("script-src https://assets-cdn.github.com").
Hello @jean . The bookmarklet does work on HTTPS sites but specifically not GitHub and other sites which have strict Content Security Policy settings. The issue is to do with Content Security Policy that prevents scripts from being loaded from domains outside a whitelist set by GitHub.
Ah! Fair enough. I think this (CSP issue) should be mentioned in the "Drag the button into your bookmarks bar then click it to launch the Hypothesis application." popup though.