How to inject script into a page using bookmarklet if the Content Security Policy is enabled on the server?

Question

I have a bookmarklet which uses jQuery and parses some elements on the page. To use jQuery, i am creating a script tag(with src as the jQuery URL) dynamically and appending

Answer 1

Take

javascript:(function(){

})();

And fill the empty line with the jQuery source code, for example the contents of https://code.jquery.com/jquery-3.4.1.min.js . Afterward set it as URL of your bookmark(let).

Answer 2

The spec says (at least I think it still does) that CSP should not prevent bookmarklets, but no browser has implemented this. Your only option is to disable CSP in the browser or use an extension.

Answer 3

Self-contained bookmarklets are another possibility. Here's jQuery 3.3.1.