Hacker News Reader

From localhost? Because that's treated as safe in this case.

I opened up the console of HN's page.

HN is a secure origin so it still works. Test it out on a non-https site.

That's right. I had commented on this before I had my caffeine. My apologies.