cameron / squirt

Speed read the web.
http://www.squirt.io
Apache License 2.0
1.22k stars 206 forks source link

Doesn't work on GitHub! #151

Open salogel42 opened 10 years ago

salogel42 commented 10 years ago

Trying to read .md docs on GitHub and on the console I get:

"Refused to load the script 'https://squirt.io/bookmarklet/frame.outer.js' because it violates the following Content Security Policy directive: "script-src https://assets-cdn.github.com https://ssl.google-analytics.com https://collector-cdn.github.com"."

Tried switching to raw and get this instead:

"Refused to load the script 'https://squirt.io/bookmarklet/frame.outer.js' because it violates the following Content Security Policy directive: "default-src 'none'". Note that 'script-src' was not explicitly set, so 'default-src' is used as a fallback."

tomByrer commented 10 years ago

Github uses HTTPS; have you used Squirt on other HTTPS websites? That security will block 3rd party scripts; I can't use a bookmarklet I created on GitHub either :/