Firefox 30.0 Web sites are apparently able to prevent me from running inline javascript (and thus bookmarkletts). STEPS TO REPRODUCE: 1. Create a bookmark button on the bookmark toolbar with the following URL: javascript:alert('test'); 2. Load http://www.github.com 3. Click your bookmark. RESULT: Content Security Policy: The page's settings blocked the loading of a resource: An attempt to execute inline scripts has been blocked EXPECTED: Web site operators should not be able to remotely operate my computer and prevent me from doing whatever I want to do with my browser.

Thanks. Fixed with security.csp.enable=false