Bookmarklets not working after upgrading vimium to 2.0.1 from 1.67.7

[evanhackett]

After upgrading the extension from 1.67.7 to 2.0.1, executing bookmarklets results in an error:

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'wasm-unsafe-eval' 'inline-speculation-rules'". Either the 'unsafe-inline' keyword, a hash ('sha256-8A9dGbzGLmv6YVPmnRg+Gb9PD+2+28AjtFwl8TgxqDE='), or a nonce ('nonce-...') is required to enable inline execution.

injectUserScript @ dom_utils.js:654

To Reproduce

Simply execute any bookmarklet using the bookmark search feature.

Browser and Vimium version

For my Browser I am using Brave version 1.58.135. The issue is present on Vimium 2.0.1, but version 1.67.7 did not have this issue.

[philc]

Confirmed. This also reproduces on Chrome, but not Firefox. I'll work on a fix.

[philc]

To clarify further, prior to 10524a0, no bookmarklets worked on Chrome in Vimium v2. Bookmarklets would work on Firefox if the site didn't have a restrictive CSP.

I've transitioned the bookmarklets feature to use the chrome.scripting.executeScript API, which brings Chrome to parity with Firefox.

However, opening bookmarklets is still pretty broken, because the feature only works on some sites.

Unfortunately, there's nothing further we can do about it. This is a known limitation of the manivest v3 API and it's being actively worked on by Google and others. That issue is tracked in #4331.