Browser extensions are useful only as long as the browser vendor allows them. Personally I prefer controlling DNS and using a localhost-bound forward proxy. S

Browser extensions are useful only as long as the browser vendor allows them. Personally I prefer controlling DNS and using a localhost-bound forward proxy. Something like http-response add-header Content-Security-Policy "script-src 'none'" Previous: https://news.ycombinator.com/item?id=7673741 https://news.ycombinator.com/item?id=7673741 (no comments) Problem: Chromebook owner prefers ChromeOS in "guest mode" and does not sync personal data to Google servers. There is no longer a way to globally disable Javascript from within Chrome. (For the guest, the filesystem from which Chrome runs is read-only.) Further, "site settings" cannot be exported from or imported into Chrome. Solution: Forward proxy configuration with global or site-specific CSP response header inclusion, can be easily saved on read/write filesystem and transferred from one Chrome install or Chromebook to the next.