Can you allow scripts only on their own domain?

[w1res]

Hey everyone,

I've been using noscript for a while, and I've been wondering. Can you block scripts from google.com everywhere EXCEPT if the website you are on is google.com? This would allow me to use google websites like maps.google.com without having to worry about tracking across other websites.


Thanks!

[Giorgio Maone]

http://noscript.net/faq#qa8_10

[w1res]

Thanks for the reply. I looked at the faq but I can't seem to get it to work. I tried to do this code to test if it works, and it seems like facebook is still loading javascript when I go there with this in the ABE. From what I understand, that code should only allow facebook.com script to load from test.com.

# facebook rule
Site facebook.com
Accept from test.com
Deny

Site fbcdn.com
Accept from test.com
Deny

[Giorgio Maone]

T. From what I understand, that code should only allow facebook.com script to load from test.com.

... and from the chrome (bookmarks and address bar).

Furthermore, if you want to include facebook.com (and you should, since most stuff comes from www.facebook.com) you should use ".facebook.com" (notice the leading "."), which is shorthand for the combination "facebook.com *.facebook.com".

[w1res]

Alright. I tried adding the "."

# google rule
Site .google.com
Accept from test.com
Deny

But now ABE seems to block the entire page from loading!

[Giorgio Maone]

I'm not sure about what you're trying to accomplish exactly, but I believe the following pretty much covers the original post:

Code: Select all

# google rule
Site .google.com .gstatic.com
Accept INC from .google.com .gstatic.com .googleapis.com
Deny

[w1res]

Thanks.

Basically, 90% of the websites that I go to are running either a "facebook.com" or "google.com" script on them due to "like" buttons and stuff. Google has even said that they try to track you across multiple sites and connect the profiles. I'm sure facebook does the same. The thing is, I like to sometimes use google services such as gmail or google maps. That makes it annoying to always have to "temporarily allow" the scripts when I go to those sites.

This way, if I am on a Google site, it allows the scripts. But if I am on a different website, the google scripts won't load.