On the man page one sees
-s URI, --snapshot=URI
Take a snapshot of URI.
Mention there that it saves it in a PNG file (and where too), else one
doesn't know what kind of 'snapshot' it is talking about.
OK
midori -s https://www.immigration.gov.tw/
works, which means whatever security thing that was stopping
midori https://www.immigration.gov.tw/
is lax with -s. So that is a security bug for you too.
P.S.,
$ midori -s https://en-us.facebook.com
Vector smash protection is enabled.
** Message: console message:
https://fbstatic-a.akamaihd.net/rsrc.php/v2/yv/r/wmev1kPJmfN.js @26:
.d8888b. 888 888
d88P Y88b 888 888
Y88b. 888 888
"Y888b. 888888 .d88b. 88888b. 888
??????????????????????????????????????????
"Y88b. 888 d88""88b 888 "88b 888 Facebook
?????????????????????????????????????????
"888 888 888 888 888 888 Y8P Facebook ???
Y88b d88P Y88b. Y88..88P 888 d88P
"Y8888P" "Y888 "Y88P" 88888P" 888
888
888
888
???????????https://www.facebook.com/selfxss?
Snapshot saved to: /tmp/snapshot-M0D84X.png