Re: [BUG] org-manual: Using bookmarklet for org-capture is no longer reliable

[Max Nikulin]

On 31/01/2023 15:11, Charles Philip Chan wrote:
> According to the author, bookmarklets are getting less
> and less useful because CSP (Content Security Policy) blocking them on many
> sites (for example Github)[2].
> [2]  https://github.com/vifon/org-protocol-for-firefox

Have you experienced the issue with simple bookmarklets, similar to ones 
suggested in the Org manual, after the following fix?

https://bugzilla.mozilla.org/show_bug.cgi?id=1478037
Bug 1478037 Allow bookmarklets to run even when the CSP on the page 
would normally block javascript: execution
Fixed in Firefox-69 2019-05-31 14:56 PDT

If I understand it correctly, the problem persists with bookmarklets 
injecting 3rd party scripts into current page, see

https://bugzilla.mozilla.org/show_bug.cgi?id=866522
Bug 866522 Bookmarklets affected by CSP

So the popup to confirm launching external protocol handler may be 
considered annoying, but bookmarklets are not really broken. An add-on 
may improve user experience.

Likely mentioning browser extensions in the manual is the way to fix 
this bug in the scope of Org. Unsure if a link to 
https://chrome.google.com/webstore/ may be considered as promoting of 
non-free software (Google Chrome) by a GNU project.