bookmarklet:
CORS bypass example (for fetching user blocklist)