bookmark panel cannot be rendered on some pages

[hxrts]

github.com is an example

This may be tricky to handle since we start to get into page-specific security protocols. Maybe we can start dropping examples here so we can see what kind of edge cases we encounter. Improvements here may port over to the bookmarklet implementation as well depending on the fix.

[cgimber]

I've been noticing this issue as well. The error I'm getting is usually some variation of this:

Refused to frame 'https://www.are.na/' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'frame-src' was not explicitly set, so 'default-src' is used as a fallback.

modalzmodalzmodalz.com is another example of this

Any word on a possible work-around?

[hxrts]

The workaround is ultimately to rewrite the extension so it doesn't do javascript injection directly into the page. Not sure how feasible this is in the immediate future, but it might be something the team has its eye on for later.