diff --git a/Sandbox/KristerKariTest.txt b/Sandbox/KristerKariTest.txt new file mode 100644 index 000000000..ed3e827c4 --- /dev/null +++ b/Sandbox/KristerKariTest.txt @@ -0,0 +1,144 @@ +! Title: Test for kristerkari's uMatrix entries +! Source: https://github.com/kristerkari/umatrix-recipes +! Version: 05July2019v1 + +! Allow Facebook ONLY on Facebook, blocked everywhere else +* facebook.com * block +* facebook.net * block +facebook.com facebook.com * allow +facebook.com fbcdn.net * allow + +! Allow Twitter ONLY on Twitter, blocked everywhere else +* twitter.com * block +twitter.com abs.twimg.com script allow +twitter.com ton.twimg.com script allow +twitter.com twitter.com * allow +twitter.com video.twimg.com plugin allow +twitter.com video.twimg.com xhr allow + +! Allow LinkedIn ONLY on LinkedIn, blocked everywhere else +* linkedin.com * block +linkedin.com linkedin.com * allow +linkedin.com static.licdn.com script allow +linkedin.com static.licdn.com xhr allow + +! YouTube incl. login (using accounts.google.com) +accounts.google.com ssl.gstatic.com xhr allow +youtube.com googlevideo.com xhr allow +youtube.com googlevideo.com media allow +youtube.com s.ytimg.com script allow +youtube.com www.gstatic.com script allow +youtube.com ytimg.com image allow + +! Twitch incl. login/signup +twitch.tv google.com image allow +twitch.tv google.com script allow +twitch.tv google.com xhr allow +twitch.tv gstatic.com script allow +twitch.tv passport-cdn.ttvnw.net script allow +twitch.tv 0914.global.ssl.fastly.net script allow +twitch.tv 0914.global.ssl.fastly.net xhr allow +twitch.tv algolia.net script allow +twitch.tv algolia.net xhr allow +twitch.tv algolianet.com script allow +twitch.tv algolianet.com xhr allow +twitch.tv polyfill.twitchsvc.net script allow +twitch.tv s.jtvnw.net image allow +twitch.tv sctatic.twitchcdn.net script allow +twitch.tv sentinel.twitchsvc.net xhr allow +twitch.tv static-cdn.jtvnw.net image allow +twitch.tv static.twitchcdn.net css allow +twitch.tv static.twitchcdn.net image allow +twitch.tv static.twitchcdn.net script allow +twitch.tv ttvnw.net xhr allow +twitch.tv web-cdn.ttvnw.net script allow + +! Slack +! Info: User agent spoof does not work reliably at slack.com as the web app checks for browser version from user agent. +ua-spoof: slack.com false +slack.com slack-edge.com css allow +slack.com slack-edge.com image allow +slack.com slack-edge.com script allow +slack.com slack-msgs.com xhr allow +slack.com slack.global.ssl.fastly.net media allow +slack.com universal.slack-core.com xhr allow + +! Dropbox +dropbox.com 127.0.0.1 xhr allow +dropbox.com cfl.dropboxstatic.com script allow +dropbox.com cfl.dropboxstatic.com xhr allow +dropbox.com dl.dropboxusercontent.com frame allow +dropbox.com www.dropboxstatic.com script allow + +! GitHub +github.com assets-cdn.github.com css allow +github.com assets-cdn.github.com image allow +github.com assets-cdn.github.com script allow +github.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com xhr allow +github.com github-production-user-asset-6210df.s3.amazonaws.com xhr allow +github.com raw.githubusercontent.com xhr allow +github.com render.githubusercontent.com frame allow +github.com render.githubusercontent.com script allow +github.com render.githubusercontent.com xhr allow + +! Gitlab +gitlab.com assets.gitlab-static.net script allow + +! Kickstarter +! 3rd-party services to whitelist: Akamai Content Delivery Network, Amazon Web Services (AWS) S3, Amazon's Cloudfront Content Delivery Network, Imgix Service, Stripe payments +kickstarter.com a248.e.akamai.net script allow +kickstarter.com d3mlfyygrfdi2i.cloudfront.net plugin allow +kickstarter.com js.stripe.com frame allow +kickstarter.com js.stripe.com script allow +kickstarter.com ksr-video.imgix.net plugin allow +kickstarter.com s3.amazonaws.com image allow +kickstarter.com s3.amazonaws.com plugin allow + +! Patreon +! Info: Uses Google's reCAPTCHA for login; Supports posting Youtube videos +! 3rd-party services to whitelist: Google's reCAPTCHA, YouTube +patreon.com cdnjs.cloudflare.com script allow +patreon.com google.com frame allow +patreon.com google.com image allow +patreon.com google.com script allow +patreon.com google.com xhr allow +patreon.com googlevideo.com xhr allow +patreon.com gstatic.com script allow +patreon.com youtube.com frame allow +patreon.com youtube.com script allow +patreon.com youtube.com xhr allow + +! Duolingo +! 3rd-party services to whitelist: Amazon's Cloudfront Content Delivery Network, CNDJS Content Delivery Network +duolingo.com cdnjs.cloudflare.com script allow +duolingo.com d1vq87e9lcf771.cloudfront.net media allow +duolingo.com d35aaqx5ub95lt.cloudfront.net media allow +duolingo.com d35aaqx5ub95lt.cloudfront.net script allow +duolingo.com d35aaqx5ub95lt.cloudfront.net xhr allow +duolingo.com d3kwyfyztuo0xs.cloudfront.net xhr allow +duolingo.com d7mj4aqfscim2.cloudfront.net media allow +duolingo.com d7mj4aqfscim2.cloudfront.net script allow +duolingo.com d7mj4aqfscim2.cloudfront.net xhr allow +duolingo.com ljknv3sref.execute-api.us-east-1.amazonaws.com xhr allow + +! Meetup +! 3rd-party services to whitelist: Amazon's Cloudfront Content Delivery Network +meetup.com dna8twue3dlxq.cloudfront.net script allow +meetup.com secure.meetupstatic.com script allow +meetup.com secure.meetupstatic.com xhr allow + +! AirBnB +airbnb.com a0.muscache.com script allow +airbnb.com maps.googleapis.com script allow + +! Bandcamp +bandcamp.com s4.bcbits.com script allow +bandcamp.com t4.bcbits.com media allow + +! SoundCloud +soundcloud.com a-v2.sndcdn.com script allow +soundcloud.com a-v2.sndcdn.com xhr allow +soundcloud.com cf-hls-media.sndcdn.com xhr allow +soundcloud.com i1.sndcdn.com xhr allow +soundcloud.com style.sndcdn.com xhr allow +soundcloud.com wis.sndcdn.com xhr allow