This article is written for Google Workspace for Education Administrators.

What are bookmarklets?

A bookmarklet is a bookmark stored in a web browser that contains JavaScript commands that add new features to the browser. [source: Wikipedia]. They allow users to perform specific functions or actions on a webpage with just a click. While bookmarklets can be valuable tools for productivity and customization, they can also be misused by students for academic dishonesty or to bypass website restrictions.

Unlike the URL format of normal bookmarks which usually begins with https://, a bookmarklet prefixes with a javascript:. You can find the difference between a normal bookmark and a bookmarklet in this screenshot.

Normal bookmark vs bookmarklet
Normal bookmark vs bookmarklet

What can you do with bookmarklets?

As Javascript is a powerful programming language, bookmarklets can perform many operations on a webpage. An example is to embed a game on any webpage. 

javascript:var frame = document.createElement('iframe'); frame.src="https://classic.minecraft.net"; frame.style.position="fixed"; frame.style.top="5%"; frame.style.right="0%"; frame.style.height="700px"; frame.style.width="1400px"; frame.style.zIndex="100000"; document.body.appendChild(frame); var btn= document.createElement("button"); btn.style.position="fixed"; btn.style.top="5%"; btn.style.right="25%"; btn.zIndex="100000"; innerHTML="HIDE"; document.body.appendChild(btn);
Embed a Minecraft game using a bookmarklet

Another example is to modify a webpage. The change is only visible to yourself.

javascript:document.body.contentEditable = 'true'; document.designMode='on'; void 0
Design any page using a bookmarklet

Bookmarklets can be also malicious. If you do not understand the Javascript language, do not copy and execute random bookmarklets you found online.

Why block bookmarklets for students?

Bookmarklets are too powerful to manage. Young students do not know what they are doing. They may find and use bookmarklets that allow them to play games, screw up school sites, or bypass school restrictions. Malicious code might destroy their school managed devices or steal sensitive information, causing security issues.

How to block bookmarklets?

Luckily, school managed Chrome browsers support block bookmarklets. Follow these instructions.

  1. Sign into your Google Admin Console.
  2. Go to Devices > Chrome > Settings.
  3. Select your students' OU on the left panel.
  4. Scroll to URL blocking.
  5. Add this line javascript://*.
    Block bookmarklet in Google Admin
  6. Click Save.

Yes, that's it. The change shall propagate to your students' Chrome browsers within 24 hours and their existing bookmarklets will no longer work.

Conclusion

As technology continues to advance, it is crucial for educational institutions to stay vigilant and address the potential misuse of bookmarklets by students. By understanding the nature of bookmarklets, implementing preventive measures, and having robust monitoring and intervention strategies, we can create an environment that promotes academic integrity and responsible digital citizenship.
Learn and explore more : Safe Doc

You may also be interested in our xFanatical Safe Doc product which help schools manage inappropriate features on Google Workspace for Education.