List of sites for which NoScript provides surrogates

Proposals for new surrogate scripts, updates/bug fixes to existing ones, tips and tricks to work around the lazy web.
Locked
Tom T.
Field Marshal
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

List of sites for which NoScript provides surrogates

Post by Tom T. »

As explained in the article Surrogate Script, NoScript will by default run a "surrogate script" for various data-mining, advertising, and other scripts that leak privacy. These "fake scripts" make pages happy when they would otherwise refuse to function unless you allowed the scripts, yet they have been "neutered" so as not to leak privacy-sensitive data.

The script sources that will be replaced are located in about:config, and easily found by typing surr in the Filter Bar (called "Search Bar" in more recent Firefox).
However, some users are not comfortable in about:config, given the nasty warning that one must click past, and the exact script names as you see them in your browser may not be the same as they are identified in about:config.

Therefore, here is a plain-English listing of the affected sources. If any part of the script name contains the below, you may leave it blocked and know that the surrogate will run. Alphabetized for your convenience, which is not the same order in which they appear in about:config per the above paragraph.

No user action is required. Simply leave the associated script in the default-deny zone, or mark it as Untrusted when you encounter it. Then there should be no need ever to allow them.
NOTE: If you allow or temp-allow them, the *real* script runs.

Based on NoScript 5.0.10rc4. Will be updated as time permits.

Code: Select all

2mdn.net
360haven (3rd-party scripts on the site)
adagionet.com (inclusion only)
addons.mozilla.org/
AddThis
adf.ly
adriver (.ru)
adscale (.de)
adsense / pagead2.googlesyndication.com
adtiger
ampush
.bidvert
binlayer
connect.facebook.net
digg.com/newsbar
dimtus / imageteam
disqus.com/*/build/themes/
facebook.com --- for cookies *only*; substitutes a cookie with expiration in 1970.
gigya.com
google-analytics.com
Google Plus1, or apis.google.com/js/plusone.js
www. google  search (variants for links and for Thumbs)
googletagservices
Gravatar
imagebam.com
imagebunk
imagehaven.net
imagevenue.com
imdb.com/video/
imgreserve.com
invodo.com
liutilities.com
mirago
mirando
ModPagespeed (generic surrogate which prevents hiding already downloaded pages)
picbucks / imagebax
picsee
quantserve.com (Quantcast Corporation)
revsci.net
skimlinks.com
js.stripe.com
support.microsoft.com
platform.twitter.com (3rd-party; doesn't replace all Twitter scripting, including home site)
uniblue.com
Wordpress blogs (generic surrogate that does scriptless site auto-show)
yieldmanager.com
Please find a way to show your appreciation to Giorgio Maone for developing these custom-built tools to enable us to make our pages work, while keeping a bit more of what little privacy we still have left.

- Tom T.
Last edited by barbaz on Tue Sep 12, 2017 5:02 am, edited 7 times in total.
Reason: update
Mozilla/5.0 (Windows NT 5.1; rv:10.0.2) Gecko/20100101 Firefox/10.0.2
Locked