4 ms·
Having used uMatrix for years now, I can't imagine browsing without it. A couple of tips for your ruleset: * disable first-party plugins (flash, PDF) * enabl
by ymse 10y ago
Having used uMatrix for years now, I can't imagine browsing without it.
A couple of tips for your ruleset:
* disable first-party plugins (flash, PDF)
* enable first-party "other" (html5 video, audio)
I also enable various CDNs globally, i.e. scripts from cloudflare cdnjs, and frames/video from youtube and vimeo. Though I don't really recommend this if security/privacy is a concern. At least they won't get your cookies :)
Edit: oops, just noticed you accept first-party everything. Still, disabling plugins should prevent a wide class of exploits (see recent Chrome PDF vulnerability).
- TeMPOraL 10y agoThanks for the tip! I've been using it for just a month or so, so I'm relatively inexperienced :). So far I've been only whitelisting youtube/vimeo CDNs and Cloudflare endpoints on a case-by-case basis. I've learned some interesting things with uMatrix. Like, on Twitter page, the password field of the login box doesn't work unless you let the site download some script (the username box works fine)...