Skip to content

A global domain database for NoScript, uBlock, uMatrix & ScriptSafe

License

Notifications You must be signed in to change notification settings

cinderaphelion/NoScript-Whitelist

 
 

Repository files navigation

A global domain database for NoScript/uBlock/uMatrix powered by the community.

This project is original designed by CHEF-KOCH and it's under Apache License v2.0 (see License).

The goal of this project is to get an complete whitelist for NoScript/uBlock/uMatrix, in fact it's created due the fact that e.g. Tor Browser temp. enable all domains - personally I don't like this, so this is the reason I created the project.

uBlock₀ + uBlock₀

These are some examples and hardened config settings.

Usage

  • Go to and click through the Firefox about:config warning.
  • Use the search box to find your whitelist and blacklist.
  • The whitelist is called capability.policy.maonoscript.sites.
  • The blacklist is called noscript.untrusted.
  • Right click --> 'Modify' to edit the value.
  • You can either replace your existing values or add our values as you see fit.

Contributing to this crowdsourced list

  • Find your whitelist and blacklist as described above.
  • To add to whitelist, ensure no bad reputation is present for your reported page.
  • Your website must not be blocked by the built-in safe-browsing feature.
  • If you know how to, please confirm the page is not compromised by XSS or other attacks.
  • Check the page/domain if the webmaster is trusted and all whois given information are valid and nothing is missing.
  • It does not matter much if you use the http:// or https:// prefix on domains as NoScript handles this.

What are the benefits?

I think most stuff can be blocked by disabling javascript on websites, so instead to temporarily allow all sites I prefer to whitelist the 'secure' ones. In fact this would help, because all other pages are by default blocked.

What about the cons?

  • The negative thingy is that this is more about user needs, if you never visit xyz listed page you normally not need to whitelist them, but on the other hand it's not dangerous because they are trustworthy and should never connect to your pages (except social pages for e.g. the little share buttons).
  • Another thing is that you also could just block the entire domain via router, so this would mean this would have no affect.
  • All social media platforms except Twitter are blocked.
  • Static filtering requires a lot of effort because you need to check each entry manually.

Can I import NoScript settings in e.g. addons like uMatrix?

You can import whitelist NoScript rules. Go to the 'My rules' pane in uMatrix's dashboard, then click Import from file. You can select a NoScript backup file and uMatrix will import what it can from the backup file. The imported rules will apply to the script column of the global scope only.

Known issue

  • uMatrix crashes on accessing the 'My Rules' panel #2

Reference

About

A global domain database for NoScript, uBlock, uMatrix & ScriptSafe

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published