Bookmarklet URL Chrome extension security report

Pass "bmlet={bookmark_name}" or "bmlet={javascript:...}" on URLs to hint Bookmarklet(s) * View the extension Options page for a few linked examples! --------------------- New in version 1.0.9 --------------------- * Adds security option for managing trusted domains in extension Options page * Breaks backward compatibility by requiring trusted domains, see Security considerations --------------------- Hint a stored Bookmarklet through Chrome Bookmark --------------------- 1. Setup Bookmark Name (Bookmarklet) and URL, ex: (javascript:document.write("<h1>Thank you for downloading</h1>");) 2. Hint a Bookmarklet with URL by adding the Bookmark Name as query string parameter, eg: https://www.google.com/?bmlet=Bookmarklet --------------------- Hint a Bookmarklet through URL hash fragment --------------------- 1. Pass HTML+ URI encoded Bookmarklet, ex: https://www.google.com/#bmlet=javascript%3Adocument.write(%26%2339%3B%26lt%3Bh1%26gt%3BThank%20you%20for%20downloading%26lt%3B%2Fh1%26gt%3B%26%2339%3B)%3B --------------------- Hint a Bookmarklet through URL query parameter --------------------- 1. Pass HTML+ URI encoded Bookmarklet, ex: https://www.google.com/?bmlet=javascript%3Adocument.write(%26%2339%3B%26lt%3Bh1%26gt%3BThank%20you%20for%20downloading%26lt%3B%2Fh1%26gt%3B%26%2339%3B)%3B --------------------- Advanced --------------------- Sometimes a Bookmarklet may refresh the page or take you to a different destination, you may use "bmlet" and "bmlet-2" parameters to perform multiple actions. Hint a Bookmarklet sequence, ex: http://your.web.app.com/?bmlet=RedirectPage&bmlet-2=ColorBackgroundYellow * Increase or decrease "bmlet-2-delay-ms" query parameter, defaults to a delayed execution of 500 milliseconds * "bmlet-delay-ms" query parameter value, defaults to a delayed execution of 0 milliseconds --------------------- Security considerations --------------------- * This extension executes Javascript code (Bookmarklet) based on the context of the URL * Use options page to manage trusted domains and/or support for only locally stored bookmarks --------------------- Privacy + data storage --------------------- * No data is collected or shared beyond your local storage * A small amount of local storage is used for a brief history of executed bookmarklets --------------------- Troubleshooting? --------------------- * View the options page on the chrome://extensions for a brief history of hinted Bookmarklets and managing security options * Requires some technical know-how for Bookmarklet(s) (Javascript/HTML/HTTP URI/URL/HTML encoding), see https://en.wikipedia.org/wiki/Bookmarklet