How can I enable some scripts to run on only one domain? For example I want to allow scripts from google.com
but only for mail.google.com
?
I've found out here, that I can do it using the ABE feature. So I've enable ABE and added the rule :
Site .google.com
Accept from .google.com
Deny INCLUSION(OBJ, SUBDOC)
(and I've also experimented with that rules syntax: adding an asterisk, adding the SELF keyword etc.)
But it looks that nothing changes... What am I doing wrong?
The NoScript ABE forum discussion has more details; but, try reformatting your rule like this:
Site .google.com
Accept INCLUSION from mail.google.com
Deny
Google scripts are widely used by web sites and blocking them completely (with Deny
) can interfere with browsing on many sites. If cookie tracking is the main concern, then replacing Deny
with Anonymize
might be get the desired effect with less breakage:
Site .google.com .gstatic.com .googleapis.com
Accept INCLUSION from mail.google.com
Anonymize
Replacing Anonymize
with Sandbox
is another blocking option. NoScript's log messages in the JavaScript console (Ctrl+Shift+J) provide lots of good information when writing new rules.
With the rule in place, you can select "Allow all from .google.com" (ditto for .gstatic.com and .googleapis.com) in NoScript's popup menu and then let ABE block the scripts everywhere except for mail.google.com (GMail's domain-name).
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With