Description
Installing a script from my website works, but Auto-Update is deselected. Trying to select it displays a notification "Script/CSS does not have updateURL or version". I use my website for personal scripts that I don't want to publish or that aren't for other people, on rare occasion.
It seems like github, greasyfork, etc. must be whitelisted (haven't taken a look at the xpi source), because installing from those sources without updateURL/downloadURL works and allows Auto-Update. My scripts have @Version, but neither update or download URL.
There is a workaround to this, if I edit the script to a lower version, and add a update or download url meta, save, then I can click Auto-Update. And on asking for update, it downloads the "new" (current) version, which doesn't have download/update url, and Auto-Update continues to be selectable, indicating that FM stored that URL for the script.
This leads me to assume there must be a "safe sources" whitelist (also saw a mention in issues of raw.github.com/*/*/*.user.js). Can an option added to allow customizing it? Or maybe this is just a bug I've found, and any source should be setting its update/download URL like other monkeys do?
Edit: This also seems to affect scripts on gitlab. (I'm trying to import everything from tampermonkey today) If this is a whitelist thing, not so much a bug, perhaps the whitelist can be applied in a different manner, like warning users when installing from an "untrusted" source, but still recording the install source either way (trumped by in-script download/update url)