`VM.url` does not work on.... Violentmonkey about vm-url HOT 5 CLOSED

Monkeypatching the window object may appear to work but does not actually do anything useful.

Exactly.

We have two worlds when injecting the script: page (the same as normal page scripts, restricted by CSP) and content (the same as the extension's scripts, not affected by CSP). Each world has its own window.

When blocked by the CSP, we cannot inject into page, so we use content as a fallback. As a result, any modification to window will not work since it's now window from content but we expect to modify the window from page.

Both worlds have access to the DOM (elements, CSS) but the JavaScript is isolated. So you can still add elements to the page. But you cannot monkeypatch or access the JavaScript objects from the window from page.

Is it possible for the library (or calling script) to detect this and log it?

It is not a good idea for this library to do this because it doesn't have to be used in a userscript.
However, you can do it easily in your script:

// Note: `injectInfo` is only available in Violentmonkey, it might be `undefined` in other script managers
if (GM_info.injectInto === 'content') {
  console.log('Injecting into `content` world. Monkeypatching will not work.');
}

from vm-url.

Violentmonkey is blocked by GitHub CSP in Firefox. It has nothing to do with this library itself.
Tampermonkey bypasses the issue by modifying the CSP which we'd rather not.
See violentmonkey/violentmonkey#1001

from vm-url.

Is it possible for the library (or calling script) to detect this and log it?

And what does it mean to be blocked in this case? I have used VM to do other things on GitHub like adding elements to the page. And I have made an extensive userscript for LinkedIn where I do all sorts of things, but only VM.url hasn't worked for me there.

I'm still new to this whole HTML/JS/CSS world and have not run into CSP issues before.

from vm-url.

Still researching, but I guess it boils down to this:

Monkeypatching the window object may appear to work but does not actually do anything useful.

from vm-url.

TYVM!

from vm-url.