From 6d4df8bfac9d2e158ed2856cf056180730d81312 Mon Sep 17 00:00:00 2001
From: siinus <pearu@siinus.net>
Date: Fri, 11 Feb 2022 14:31:16 +0200
Subject: [PATCH] Add uMatrix rules

---
 misc/umatrix-rules.txt | 99 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 99 insertions(+)
 create mode 100644 misc/umatrix-rules.txt

diff --git a/misc/umatrix-rules.txt b/misc/umatrix-rules.txt
new file mode 100644
index 0000000..1ef0f05
--- /dev/null
+++ b/misc/umatrix-rules.txt
@@ -0,0 +1,99 @@
+https-strict: behind-the-scene false
+matrix-off: about-scheme true
+matrix-off: behind-the-scene true
+matrix-off: chrome-extension-scheme true
+matrix-off: chrome-scheme true
+matrix-off: moz-extension-scheme true
+matrix-off: mozilla.org true
+matrix-off: opera-scheme true
+matrix-off: vivaldi-scheme true
+matrix-off: wyciwyg-scheme true
+noscript-spoof: * true
+referrer-spoof: * true
+referrer-spoof: behind-the-scene false
+* * * block
+* * css allow
+* * frame block
+* * image allow
+* 1st-party * allow
+* 1st-party frame allow
+* ajax.googleapis.com script allow
+* bigcommerce.com script allow
+* bigcommerce.com xhr allow
+* cdn.jsdelivr.net script allow
+* cdnjs.cloudflare.com script allow
+* cloudfront.net script allow
+* cloudfront.net xhr allow
+* code.jquery.com script allow
+* discourse-cdn.com script allow
+* execute-api.us-east-1.amazonaws.com xhr allow
+* www.google.com frame allow
+* www.google.com script allow
+* www.google.com xhr allow
+* www.gstatic.com script allow
+* www.recaptcha.net frame allow
+* www.recaptcha.net script allow
+* www.recaptcha.net xhr allow
+amazon.com images-na.ssl-images-amazon.com script allow
+amazon.com images-na.ssl-images-amazon.com xhr allow
+amazon.com m.media-amazon.com script allow
+bandcamp.com s4.bcbits.com script allow
+bandcamp.com t4.bcbits.com media allow
+caseking.de cdn.findologic.com script allow
+caseking.de service.findologic.com script allow
+christitus.com cdn.podia.com script allow
+delfi.ee eeds.babahhcdn.com xhr allow
+delfi.ee g.nh.ee script allow
+delfi.ee g1.nh.ee script allow
+delfi.ee r.muu.ee frame allow
+delfi.ee r.muu.ee script allow
+delfi.ee ssl.p.jwpcdn.com script allow
+dpdgroup.com maps.googleapis.com script allow
+dpdgroup.com maps.googleapis.com xhr allow
+facebook.com fbcdn.net script allow
+facebook.com fbcdn.net xhr allow
+github.com github.githubassets.com script allow
+humblebundle.com humblebundle-a.akamaihd.net script allow
+imdb.com cloudfront.xp-assets.aiv-cdn.net script allow
+imdb.com fls-na.amazon.com other allow
+imdb.com images-na.ssl-images-amazon.com script allow
+imdb.com imdb-video.media-imdb.com media allow
+imdb.com imdb-video.media-imdb.com xhr allow
+imdb.com m.media-amazon.com frame allow
+imdb.com m.media-amazon.com script allow
+imdb.com m.media-amazon.com xhr allow
+imdb.com sg.media-imdb.com xhr allow
+imdb.com unagi-na.amazon.com other allow
+imdb.com unagi-na.amazon.com xhr allow
+imdb.com unagi.amazon.com other allow
+kavad.ee cdn.tvstart.com script allow
+montonio.com js.stripe.com script allow
+newegg.com c1.neweggimages.com script allow
+newegg.com c1.neweggimages.com xhr allow
+packagist.org algolia.net script allow
+packagist.org algolia.net xhr allow
+packagist.org algolianet.com script allow
+packagist.org algolianet.com xhr allow
+paypal.com paypal-api.arkoselabs.com script allow
+paypal.com paypal-api.arkoselabs.com xhr allow
+paypal.com www.paypalobjects.com frame allow
+paypal.com www.paypalobjects.com script allow
+pinterest.com s.pinimg.com script allow
+reddit.com v.redd.it media allow
+reddit.com v.redd.it xhr allow
+reddit.com www.redditmedia.com frame allow
+reddit.com www.redditstatic.com script allow
+smartpost.ee maps.googleapis.com script allow
+smartpost.ee maps.googleapis.com xhr allow
+soundcloud.com s3.amazonaws.com xhr allow
+soundcloud.com sndcdn.com script allow
+soundcloud.com sndcdn.com xhr allow
+steamcommunity.com community.akamai.steamstatic.com script allow
+steampowered.com cdn.akamai.steamstatic.com media allow
+steampowered.com store.akamai.steamstatic.com script allow
+techpowerup.com tpucdn.com script allow
+twitch.tv static.twitchcdn.net xhr allow
+twitch.tv ttvnw.net xhr allow
+twitch.tv twitchcdn.net script allow
+youtube-nocookie.com googlevideo.com xhr allow
+youtube.com googlevideo.com xhr allow