[tiborsaas]

Great idea, after all it's impossible to render sensitive data server side :)

[bananaface]

I said it's less sensitive.

[tiborsaas]

Does it matter?

Btw here is your API:

    document.body.innerHTML

[bananaface]

And which permission do I take to access that?

[tiborsaas]

As a bookmarklet, none :) That's the best you can get.