Markup: Github flavoured markdown doesn't support Javascript links. (for bookmarklets)
I have a readme that I want to have a link for a bookmarklet to in. The link starts with javascript:.....
Due to this, github doesn't render the link, and instead renders it as a link to github.com
Edit (6 years later)
I under-estimated the difficulty of using github pages. You should probably use that.
shalecraig
All 16 comments
Just encountered this as well. Tried escaping all brackets in the link, and the page is rendered correctly visually, but there is no "href" attribute given to the A tag.
DataTables
on 7 Nov 2011
+1
trshafer
on 24 Feb 2012
+1
mourner
on 23 Mar 2012
Still needed
+1
kuddl
on 30 Mar 2012
+1
austinhappel
on 23 Apr 2012
+1, Please
tomwolber
on 22 May 2012
I was thinking about it - this is done to prevent sneaky XSS includes in Github. I'm going to close this issue.
shalecraig
on 6 Jun 2012
+1
even if it's a xss prevention mechanism, it's up to the user to know if should click on a javascript link
bojanbjelic
on 18 Jun 2012
+1
Just show some visual warning next to it, some icon or something similar.
gnclmorais
on 2 Jul 2013
Has anyone found an alternative to sharing bookmarklets in a github wiki?
crccheck
on 25 Jun 2014
+1
benkeen
on 26 Jun 2015
馃槥
omrilotan
on 6 Feb 2017
Maybe we will have some day this feature?
tomasdev
on 26 May 2017
For security reasons, we don't allow user-controlled scripts to run on GitHub.com, and this is one example of that. (A malicious user could steal your GitHub cookies or access other open GitHub tabs with possibly confidential information, due to the same-origin policy.)
kivikakk
on 29 May 2017
This issue makes it impossible to offer OpenSearch plug-ins on github wiki pages. Firefox supports two methods for a web page to offer an OpenSearch plug-in: auto-discovery by placing a link rel in the head element, or a link that invokes a javascript method.
https://developer.mozilla.org/en-US/docs/Web/API/Window/sidebar/Adding_search_engines_from_Web_pages
Neither of these looks possible in github wiki pages -- the head element doesn't appear customizable at all, and user-controlled javascript is disabled for security reasons (= this report).
lersek
on 24 Jul 2017
works in github pages like https://retrography.github.io/VUTt/,
but not in gists (same VUTt Link) https://gist.github.com/Artistan/2f212b8ea3d1ec0fbe3e1be1fbb7a987
Artistan
on 25 Jan 2018
Related issues
zoffixznet
路
6Comments
davidmoten
路
5Comments
jpluimers
路
5Comments
Istiakmorsalin
路
4Comments
doggy8088
路
4Comments
Most helpful comment
For security reasons, we don't allow user-controlled scripts to run on GitHub.com, and this is one example of that. (A malicious user could steal your GitHub cookies or access other open GitHub tabs with possibly confidential information, due to the same-origin policy.)