Conditional acceptance of script host bsd on page host?

[LrgrThnLf]

I've noticed an increasing number of people load scripts from "common" rather than unique domains.
Ie.

• Google Metrics
• Amazon AWS (S3/EC2 etc.)
• jquery.org

I use google apps, but I don't want to turn on google metrics on every webpage I might otherwise enable javascript for.
I may visit one site that hosts static script components on Amazon, but another could be nefarious for all I know.
Some sites may break if I don't enable their third party scripts (where someone's injected their javascript stats system into link navigation and I don't want to have go diving into code to consider surrogates or whitelist use of that system every time).

Is a two tier system available? Perhaps required? Does one perhaps need to be able to descend to the right of the hostname in a URL now?

[Giorgio Maone]

Try allowing the 3rd party library script wholesale, then tweaking it (mixing Accept and Deny statements) in ABE.
E.g., Allow jquery.com in NoScript, then add

Code: Select all

Site *.jquery.com jquery.com
Accept from *.jquery jquery sometrustedsite1.com somestrustedsite2.com
Deny

in your USER ruleset (NoScript Options|Advanced|ABE)

[LrgrThnLf]

Ahh cool.. I'll look into it. Thanks!