Help needed with something 'simple'

[Random Commenter]

Try as I might, I cannot get something that should be rather simple to work.

I'm trying to get NoScript / ABE settings configured so that scripts hosted at google.com are denied except when coming from specific sites EXCLUDING google.com itself. Copying and modifying the recommended ABE rules for Facebook just don't work (they've worked just fine for Facebook in their original form).

The reason for wanting such behavior is simple, I prefer using those Google services that I do use as I've used them for a long time (a good example is Images which in its new JS version doesn't even work properly for me, never has and apparently never will) and that behavior includes not having their horrible JS-infested modernized versions forced upon me. I'd be happy blocking all their scripts if it wasn't for an alarming number of sites using Recaptcha hosted at google.com instead of recaptcha.net.

It's an irritating world out there where every move you make on the net is reported to the big G in one form or another. Hell, you even need to allow this particular spyware to run so you can post on this forum :/

So, please. I'm asking for assistance, perhaps an example ruleset that allows me to accomplish this. A good example would be using this particular forum so that Recaptcha works but scripts from google.com don't work at google.com. Feel free to ridicule me about my preferences regarding usability and my tinfoilhat tendencies while doing so, if it helps

[Giorgio Maone]

Unfortunately this is not easy as it seems, because google.com pages contain also inline scripts (i.e. scripts whose source is embedded in the page itself, rather than loaded from a separate file), and once you "Allow google.com" in NoScript, those scripts cannot be blocked by ABE, which works at the HTTP request level.
Also, having google.com allowed but http://www.google.com unable to load its own script file is very likely to cause breakages, because the site "believes" scripts are enabled, therefore it doesn't fallback to a scriptless behavior.

What you can do is

1. NoScript:
   Allow .google.com
2. ABE:
   Site .google.com
   Accept from SELF
   Accept from site1.com site2.com site3.com
   Deny

This leaves you with the "Google instant" behavior you hate, but you can disable it from Google settings (last item on the bottom).