diff --git a/reader.html b/reader.html
index 74b3cf8..ad6e96a 100644
--- a/reader.html
+++ b/reader.html
@@ -2,7 +2,7 @@
 <meta charset="utf-8">
 <meta name="color-scheme" content="light dark">
 <meta name="viewport" content="width=device-width, initial-scale=1">
-<meta http-equiv="Content-Security-Policy" content="default-src 'self' blob:; script-src 'self'; style-src 'self' blob: 'unsafe-inline'; img-src 'self' blob: data:; connect-src 'self' blob: data:; frame-src blob: data:; object-src blob: data:; form-action 'none';">
+<meta http-equiv="Content-Security-Policy" content="default-src 'self' blob:; script-src 'self'; style-src 'self' blob: 'unsafe-inline'; img-src 'self' blob: data:; connect-src 'self' blob: data: *; frame-src blob: data:; object-src blob: data:; form-action 'none';">
 <title>E-Book Reader</title>
 <style>
 :root {
@@ -30,6 +30,7 @@ body {
     align-items: center;
     justify-content: center;
     text-align: center;
+    visibility: hidden;
 }
 #drop-target h1 {
     font-weight: 900;
diff --git a/reader.js b/reader.js
index 304a049..886605c 100644
--- a/reader.js
+++ b/reader.js
@@ -320,3 +320,11 @@ dropTarget.addEventListener('dragover', dragOverHandler)
 $('#file-input').addEventListener('change', e =>
     open(e.target.files[0]).catch(e => console.error(e)))
 $('#file-button').addEventListener('click', () => $('#file-input').click())
+
+const params = new URLSearchParams(location.search)
+const url = params.get('url')
+if (url) fetch(url)
+    .then(res => res.blob())
+    .then(blob => open(new File([blob], new URL(url).pathname)))
+    .catch(e => console.error(e))
+else dropTarget.style.visibility = 'visible'