This is doubly frustrating when the spec explicitly says CSP shouldn't interfere with bookmarklets.
> Policy enforced on a resource SHOULD NOT interfere with the operation of user-agent features like addons, extensions, or bookmarklets.
> Policy enforced on a resource SHOULD NOT interfere with the operation of user-agent features like addons, extensions, or bookmarklets.
I recently wanted to edit a Firefox theme to highlight the active tab more strongly.
Surprise! To install extensions not signed by Mozilla, you need Firefox Developer Edition.
Because a configuration option would make it too easy.