Yes, the reason is that most sites these days serve a content security policy which only allows code from whitelisted origins.