https-strict: behind-the-scene false
matrix-off: about-scheme true
matrix-off: behind-the-scene true
matrix-off: chrome-extension-scheme true
matrix-off: chrome-scheme true
matrix-off: moz-extension-scheme true
matrix-off: opera-scheme true
matrix-off: wyciwyg-scheme true
noscript-spoof: * true
referrer-spoof: * true
referrer-spoof: behind-the-scene false
referrer-spoof: dropbox.com false
referrer-spoof: firefox.com false
* * * block
* * css allow
* * frame block
* * image allow
* 1st-party * allow
* 1st-party frame allow
* facebook.com * block
* facebook.net * block
* googleapis.com * allow
* linkedin.com * block
accounts.firefox.com accounts-static.cdn.mozilla.net script allow
accounts.google.com ssl.gstatic.com xhr allow
addons.mozilla.org addons-amo.cdn.mozilla.net script allow
amazon.com a0.awsstatic.com script allow
amazon.com images-na.ssl-images-amazon.com script allow
arstechnica.com cdn.arstechnica.net script allow
bitbucket.org ace-cdn.atlassian.com script allow
bitbucket.org bitbucket-marketing-cdn.atlassian.com script allow
blog.mozilla.org netdna-ssl.com script allow
cloudflare.com cloudflareapps.com xhr allow
cloudflare.com filepicker.io cookie allow
cloudflare.com filepicker.io frame allow
cloudflare.com filepicker.io script allow
developer.mozilla.org interactive-examples.mdn.mozilla.net frame allow
developer.mozilla.org mdn.mozillademos.org frame allow
developer.mozilla.org mdn.mozillademos.org script allow
digitalocean.com statuspage.io xhr allow
digitalocean.com stripe.com script allow
discourse.mozilla.org cdn-production.discourse.mozilla-community.org script allow
drive.google.com content.googleapis.com frame allow
drive.google.com content.googleapis.com script allow
drive.google.com ssl.gstatic.com script allow
dropbox.com 127.0.0.1 xhr allow
dropbox.com api.braintreegateway.com script allow
dropbox.com cf.dropboxpayments.com frame allow
dropbox.com cf.dropboxpayments.com script allow
dropbox.com cfl.dropboxstatic.com xhr allow
dropbox.com dropboxstatic.com script allow
dropbox.com rebrand.dropboxstatic.com media allow
ebay.com ebayrtm.com script allow
ebay.com ebaystatic.com script allow
facebook.com facebook.com * allow
facebook.com fbstatic-a.akamaihd.net * allow
fallsat109.com rentcafe.com * allow
foxnews.com global.fncstatic.com script allow
github.com ghconduit.com xhr allow
github.com githubapp.com * allow
github.com githubapp.com cookie allow
github.com githubusercontent.com xhr allow
github.com pages-themes.github.io frame allow
github.com pages-themes.github.io script allow
github.com raw.githubusercontent.com * allow
github.com render.githubusercontent.com * allow
github.com render.githubusercontent.com frame allow
github.com render.githubusercontent.com script allow
github.com s3.amazonaws.com other allow
github.com s3.amazonaws.com xhr allow
github.com sourcegraph.com xhr allow
gitlab.com gitlab-static.net script allow
google.co apis.google.com script allow
google.co www.gstatic.com script allow
google.co www.gstatic.com xhr allow
google.com * frame allow
google.com content.googleapis.com script allow
google.com content.googleapis.com xhr allow
google.com csi.gstatic.com image allow
google.com ggpht.com * allow
google.com google.com * inherit
google.com googleusercontent.com * allow
google.com googleusercontent.com frame allow
google.com gstatic.com * allow
google.com ssl.gstatic.com media allow
google.com ssl.gstatic.com script allow
google.com translate.googleusercontent.com frame allow
google.com www.gstatic.com script allow
huffingtonpost.com s.m.huffpost.com script allow
huffingtonpost.com s.m.huffpost.com xhr allow
linkedin.com * * allow
linkedin.com * frame allow
linkedin.com licdn.com * allow
linkedin.com licdn.com frame allow
linkedin.com licdn.com script allow
linkedin.com linkedin.com * allow
linkedin.com linkedin.com frame allow
linkedin.com linkedin.com script allow
linkedin.com static.licdn.com * allow
linkedin.com static.licdn.com script allow
linkedin.com static.licdn.com xhr allow
linkedin.com www.linkedin.com * allow
linkedin.com www.linkedin.com frame allow
linkedin.com www.linkedin.com script allow
live.com account.azureedge.net script allow
live.com auth.gfx.ms script allow
live.com az725175.vo.msecnd.net script allow
live.com browser.pipe.aria.microsoft.com xhr allow
live.com loki.delve.office.com xhr allow
live.com mem.gfx.ms script allow
live.com office.net media allow
live.com office.net script allow
live.com ow1.res.office365.com script allow
live.com ow1.res.office365.com xhr allow
live.com owamail.azureedge.net xhr allow
live.com r1.res.office365.com script allow
live.com r1.res.office365.com xhr allow
live.com r4.res.office365.com xhr allow
live.com res.delve.office.com script allow
live.com sharepoint.com frame allow
live.com statics-uhf-eus.akamaized.net script allow
live.com web.vortex.data.microsoft.com other allow
live.com web.vortex.data.microsoft.com script allow
microsoft.com assets.onestore.ms script allow
microsoft.com auth.gfx.ms script allow
microsoft.com i2-msdn.sec.s-msft.com script allow
microsoft.com login.live.com frame allow
microsoft.com login.live.com script allow
microsoft.com mem.gfx.ms script allow
microsoft.com mem.gfx.ms xhr allow
microsoft.com statics-onestore-eas-ms-com.akamaized.net script allow
microsoft.com statics-uhf-neu.akamaized.net script allow
microsoftonline.com secure.aadcdn.microsoftonline-p.com script allow
microsoftonline.com www.office.com frame allow
microsoftonline.com www.office.com script allow
myaccount.google.com www.gstatic.com xhr allow
netflix.com codex.nflxext.com script allow
netflix.com nflxext.com media allow
nytimes.com a1.nyt.com script allow
nytimes.com int.nyt.com script allow
nytimes.com int.nyt.com xhr allow
nytimes.com s1.nyt.com xhr allow
nytimes.com static01.nyt.com script allow
nytimes.com vp.nyt.com media allow
nytimes.com web-player.art19.com script allow
office.com browser.pipe.aria.microsoft.com xhr allow
office.com easofficehome.msocdn.com script allow
office.com graph.microsoft.com xhr allow
office.com live.com cookie allow
office.com msocdn.com script allow
office.com ocws.officeapps.live.com xhr allow
office.com office365.com frame allow
office.com r1.res.office365.com script allow
office365.com browser.pipe.aria.microsoft.com xhr allow
plus.google.com www.gstatic.com xhr allow
reddit.com g.redditmedia.com media allow
reddit.com www.redditmedia.com frame allow
reddit.com www.redditmedia.com script allow
reddit.com www.redditstatic.com script allow
securecafe.com bootstrapcdn.com * allow
securecafe.com rentcafe.com * allow
sharepoint.com browser.pipe.aria.microsoft.com xhr allow
sharepoint.com contentstorage.osi.office.net script allow
sharepoint.com excel.officeapps.live.com frame allow
sharepoint.com powerpoint.officeapps.live.com frame allow
sharepoint.com r1.res.office365.com script allow
sharepoint.com sharepoint.com cookie allow
sharepoint.com static.sharepointonline.com script allow
sharepoint.com word-edit.officeapps.live.com frame allow
sharepoint.com word-view.officeapps.live.com frame allow
speedtest.net b.cdnst.net script allow
stackexchange.com cdn.sstatic.net script allow
stackoverflow.com ajax.googleapis.com script allow
stackoverflow.com cdn.sstatic.net script allow
stackoverflow.com sstatic.net image allow
stackoverflow.com sstatic.net script allow
support.mozilla.org location.services.mozilla.com xhr allow
support.mozilla.org support.cdn.mozilla.net script allow
translate.google.com translate.googleapis.com script allow
translate.google.com translate.googleapis.com xhr allow
translate.google.com translate.googleusercontent.com frame allow
translate.google.com translate.googleusercontent.com script allow
wikipedia.org cxserver.wikimedia.org xhr allow
wikipedia.org login.wikimedia.org script allow
wikipedia.org meta.wikimedia.org script allow
wikipedia.org recommend.wmflabs.org xhr allow
wikipedia.org upload.wikimedia.org media allow
youtube.com apis.google.com * allow
youtube.com apis.google.com frame allow
youtube.com google.com cookie allow
youtube.com google.com script allow
youtube.com googlevideo.com * allow
youtube.com googlevideo.com xhr allow
youtube.com plus.google.com * allow
youtube.com plus.google.com frame allow
youtube.com plus.googleapis.com * allow
youtube.com plus.googleapis.com frame allow
youtube.com s.ytimg.com script allow
youtube.com s.ytimg.com xhr allow
youtube.com ytimg.com * allow