Under each trust level are categories representing types of content potentially loaded from a domain: script, object, media, frame, font, webgl, fetch, and other. If a content type is actively used it will show its block in red.
Go to the Per-site Permissions screen
What you see listed out of the box is a list of base domains that are Trusted by default out-of-the-box.
Click on the Trusted button for a few of the built-in base domain rules.
- See how everything (script, object, media, frame, font, webgl, fetch, and other) for Trusted sites is allowed? That means google.com and all of it's subdomains are Trusted out-of-the box.
- Now, set every built-in trusted site to Default and refresh the page.
- Did every site go away? This is because sites with Default permissions are not permanently saved.
- it shows google.com as Trusted with a little clock so it's actually Temporarily Trusted
We also have gstatic.com and https://www.gstatic.com with Default permissions.
Code: Select all
Default - uncheck all Trusted- check script, font, fetch, media Untrusted - uncheck all Temporarily set top-level sites to TRUSTED
After a while your Per-site Permissions screen just has a bunch of Untrusted analytics and advertising base domains and a few Custom subdomains. Rarely do I have a base domain that gets Custom permissions (actually, none so far).
I tend to get the painful stuff out of the way by browsing some news sites (cnn.com, washingtonpost.com, tomshardware.com, foxnews, etc. and mark a most 3rd parties I encounter Untrusted. If a video or image doesn't show, or a font I would like to see won't load, I use custom rules and find which 3p domains permissions fix the breakage. That way I get the popular 3rd party content addressed. After a few custom rules you probably won't need much more changing.
Extra tip: If you want to move away from uBlock Origin, run both for a while and use uBlock's blocked domains to get familiar with what domains you can Untrust in NoScript. After a while you'll start recognizing useless domains versus domains that provide media.