[detaro]

Bookmarklets can't circumvent CSP policies (or at least couldn't always, not sure if this has changed), extensions can.