Greasy Fork

Can github link be whitelisted: https://github.com/sizzlemctwizzle/GM_config

I see only outdated version on greasyfork: https://greasyfork.org/libraries/GM_config/20131122

You can use this:
https://cdn.jsdelivr.net/gh/sizzlemctwizzle/GM_config@43fd0fe4de1166f343883511e53546e87840aeaf/gm_config.js

@JasonBarnabe, I guess GitHub links to a specific commit should be allowed too:
https://github.com/sizzlemctwizzle/GM_config/raw/43fd0fe4de1166f343883511e53546e87840aeaf/gm_config.js

GitHub is not a CDN, you're not supposed to use it like that. (More for GitHub's and the user's sake than Greasy Fork's.)

You can use this:

https://cdn.jsdelivr.net/gh/sizzlemctwizzle/GM_config@43fd0fe4de1166f343883511e53546e87840aeaf/gm_config.js

Thx, that works.
How did you got that link? Can it be generated to any GitHub code?

I've looked at the allowed external URL patterns, then opened jsdeliver.com, and crafted the link per an example. I guess it works for any repo, I didn't verify it in the jsdeliver's documentation though.

So malicious scripts can slip through with this method, if GitHub is considered not safe.

No. GitHub isn't allowed because it's not CDN.

There's no difference wrt security because commit hashes change if the code changes.

Oh, yes.