Page 1 of 1

Block embedded unless on primary domain

Posted: Tue Dec 11, 2012 2:39 am
by nmb3000
Hello, I have a question about blocking embedded objects such as Flash.

Is there any way to block embedded objects unless you're on a page in the "originating" or "primary" domain? For example, I'd like YouTube videos to be blocked unless I'm on youtube.com.

I realize this is a tricky one due to the way sites host their embedded objects from other domains (youtube.com -> ytimg.com for example). Because of this it would probably have to be customized by hand. For example, I'd probably enable the "Apply these restrictions to whitelisted sites also" but then have some kind of exception list, to which I'd add "youtube.com" so that content on that domain is not blocked by default.

Sorry if this isn't clear. Thanks for your time!

Re: Block embedded unless on primary domain

Posted: Tue Dec 11, 2012 9:58 am
by Thrawn
There is a sticky post about this.

You can also try RequestPolicy - most/all of the support team uses it - but it does much more than restrict plugins to their own site, so read carefully first.

Re: Block embedded unless on primary domain

Posted: Tue Dec 11, 2012 6:31 pm
by nmb3000
Thank you, I'll take a look at those posts. Apologize for not noticing them earlier :)