Thanks for trying it out! I haven't noticed problems with cors enabled sites in general, so I'm curious what you tried to do. The bookmarklet doesn't with with websites that use headers to block scripts and css from unknown domains. Github is one example.
