! uMatrix: Ruleset recipes 1.0
! Title: uMatrix Recipes
! Maintainer: themagicteeth
!
! Assumes the following rules in place:
!
! https-strict: * true
! no-workers: * true
! noscript-spoof: * true
! referrer-spoof: * true
! * * * block
! * 1st-party css allow
! * 1st-party image allow
!
! Lines starting with character "!" are ignored.
! Character "_" is an alias for "currently selected scope".
! An empty line MUST be used to separate distinct ruleset recipes.

!!!! 3rd Party Services !!!!
! TODO: GitHub, Imgur, Gfycat, CodePen
Google Maps as 3rd Party
  * maps.googleapis.com
    _ maps.gstatic.com image
    _ maps.googleapis.com image
    _ maps.googleapis.com script
    _ chart.apis.google.com image

Vimeo as 3rd-party
  * player.vimeo.com
    _ vimeo.com script
    _ vimeo.com image
    _ akamaized.net image
    _ 09-lvl3-pdl.vimeocdn.com media
    _ player.vimeo.com frame
    _ player.vimeo.com css
    _ player.vimeo.com xhr
    _ i.vimeocdn.com image
    _ vimeocdn.com css
    _ vimeocdn.com script

MathJax as 3rd-party
  * cdn.mathjax.org
    _ cdn.mathjax.org script
    _ cdnjs.cloudflare.com script

Youtube as 3rd-party
 * youtube.com
   _ youtube.com image
   _ youtube.com css
   _ youtube.com script
   _ youtube.com frame
   _ youtube.com xhr
   _ googlevideo.com xhr
   _ ytimg.com image
   _ ytimg.com script

Twitter Third Party
  * twitter.com
    _ cdn.syndication.twimg.com script
    _ pbs.twimg.com image
    _ platform.twitter.com css
    _ platform.twitter.com script

Reddit Third Party
  * reddit.com
    _ www.reddit.com script

GitHub Third Party
  * github.com
    _ gist.github.com script
    _ assets-cdn.github.com css

Imgur 3rd-party
  * imgur.com
    _ imgur.com media
    _ imgur.com image

Gfycat 3rd-party
  * gyfcat.com
    _ gyfcat.com media

Medium Third Party
  * medium.com
    _ cdn-images-1.medium.com image
    _ cdn-static-1.medium.com css
    _ glyph.medium.com css
    _ cdn-static-1.medium.com script
    _ medium.com frame

reCaptcha
  * www.google.com
    _ www.google.com css
    _ www.google.com frame
    _ www.google.com image
    _ www.google.com script
    _ www.google.com xhr
    _ www.gstatic.com css
    _ www.gstatic.com image
    _ www.gstatic.com script

Khan Academy
 khanacademy.org *
    _ cdn.kastatic.org css
    _ cdn.kastatic.org script
    _ cdn.kastatic.org xhr
    _ www.khanacademy.org xhr
    _ noscript-spoof: _ false

Humble Bundle
  humblebundle.com *
    _ humblebundle-a.akamaihd.net css
    _ humblebundle-a.akamaihd.net image
    _ humblebundle-a.akamaihd.net script
    _ humblebundle.imgix.net image
    _ www.humblebundle.com cookie
    _ www.humblebundle.com script
    _ www.humblebundle.com xhr

Amazon
  amazon.com *
    _ media-amazon.com css
    _ media-amazon.com image
    _ ssl-images-amazon.com css
    _ ssl-images-amazon.com image
    _ ssl-images-amazon.com script
    _ www.amazon.com script

Hulu - Sign Up
  hulu.com *
    _ signup.hulu.com script
    _ signup.hulu.com xhr

Spotify - Account
  spotify.com *
    _ accounts.spotify.com cookie
    _ accounts.spotify.com xhr
    _ d2d1dxiu3v1f2i.cloudfront.net css
    _ d2d1dxiu3v1f2i.cloudfront.net script
    _ spotify.com cookie
    _ www.scdn.co css
    _ www.scdn.co image
    _ www.spotify.com script

Star Tribune
  startribune.com *
    _ stimg.co image

Javascript 30
  javascript30.com
      _ akamaized.net image
      _ s3.amazonaws.com image

Wes Bos
  wesbos.com *
    _ ajax.googleapis.com script
    _ akamaized.net image
    _ cdnjs.cloudflare.com css
    _ courses.wesbos.com script
    _ courses.wesbos.com xhr
    referrer-spoof: _ false

wikiHow
  wikihow.com *
    _ www.wikihow.com script

MNSure
  mnsure.org *
    mn.gov id.mneiam.mn.gov cookie
    _ auth.mnsure.org script
    _ mnsure.org cookie
    _ people.mnsure.org frame
    _ people.mnsure.org script
    _ people.mnsure.org xhr
    _ plans.mnsure.org frame
    _ www.mnsure.org script

Purism
  puri.sm *
    _ forums.puri.sm script

Dunwoody
  dunwoody.edu *
    _ adfs.dunwoody.edu cookie
    _ adfs.dunwoody.edu script

Codewars - Account
  codewars.com *
    _ cdn.ravenjs.com script
    _ codewars.com cookie
    _ www.codewars.com script
    _ www.codewars.com xhr

Read The Docs
  * readthedocs.io
    _ media.readthedocs.org css

Kaggle
  kaggle.com *
    _ kaggle2.blob.core.windows.net image
    _ www.kaggle.com cookie
    _ www.kaggle.com script
    _ www.kaggle.com xhr

Tachyons
 tachyons.io *
    _ unpkg.com css
    _ 1st-party script
    _ mrmrs.github.io image

Imgur
  imgur.com *
    _ i.imgur.com script
    _ s.imgur.com script

Hooktube
  hooktube.com *
    _ ggpht.com image
    _ googlevideo.com media
    _ hooktube.com script
    _ hooktube.com xhr
    _ ytimg.com image

Canvas
  instructure.com *
    _ canvasservices.evaluationkit.com xhr
    _ canvasservices.evaluationkit.com frame
    _ du11hjcvx0uqb.cloudfront.net css
    _ du11hjcvx0uqb.cloudfront.net image
    _ du11hjcvx0uqb.cloudfront.net script
    _ evaluationkit.com css
    _ evaluationkit.com script
    _ instructure.com cookie
    _ instructure.com frame
    _ instructure.com script
    _ instructure.com xhr
    _ instructure-uploads.s3.amazonaws.com css
    _ instructure-uploads.s3.amazonaws.com xhr
    _ instructure-uploads.s3.amazonaws.com image
    _ instructure-uploads.s3.amazonaws.com script

Vim Awesome
  vimawesome.com *
    _ vimawesome.com script
    _ vimawesome.com xhr
    _ github.com image
    _ raw.githubusercontent.com image

Unsplash
  unsplash.com *
    _ unsplash.com script
    _ unsplash.com unsplash.com xhr

Vue JS
  vuejs.org *
    _ cdn.jsdelivr.net script
    _ vuejs.org script

Poloniex - Account
  poloniex.com *
    poloniex.com script
    poloniex.com xhr
    poloniex.com cookie

Dropbox
  dropbox.com *
    _ 127.0.0.1 xhr
    _ cfl.dropboxstatic.com css
    _ cfl.dropboxstatic.com image
    _ cfl.dropboxstatic.com script
    _ dl.dropboxusercontent.com frame
    _ www.dropbox.com cookie
    _ www.dropbox.com script
    _ www.dropbox.com xhr
    _ www.dropboxstatic.com script
    _ www.dropboxstatic.com xhr

CornerStone
  mycornerstoneloan.org *
    _ myaccount.mycornerstoneloan.org cookie
    _ myaccount.mycornerstoneloan.org media
    _ myaccount.mycornerstoneloan.org script
    _ myaccount.mycornerstoneloan.org xhr

Fidelity
  fidelity.com *
    _ dpcs.fidelity.com xhr
    _ fid-inv.com cookie
    _ fidelity.com cookie
    _ fidelity.com script
    _ login.fidelity.com script
    _ login.fidelity.com xhr
    _ oltx.fidelity.com xhr
    _ www.fid-inv.com css
    _ www.fid-inv.com image
    _ www.fid-inv.com script

DeployHQ
  deployhq.com *
    _ deployhq.com cookie
    _ deployhq.com script
    _ deployhq.com xhr
    _ websocket.deployhq.com xhr

Wikipedia
  wikipedia.org *
    _ upload.wikimedia.org image

CodePen
  codepen.io *
    _ codepen.io script
    _ codepen.io xhr

Ars Technica
  arstechnica.com *
    _ cdn.arstechnica.net css
    _ cdn.arstechnica.net image
    _ cdn.arstechnica.net script

Can I Use...
  caniuse.com *
    _ caniuse.com script
    _ caniuse.com xhr

NewEgg - Account
  newegg.com *
    _ c1.neweggimages.com css
    _ c1.neweggimages.com image
    _ c1.neweggimages.com script
    _ secure.newegg.com cookie
    noscript-spoof: _ false

NewEgg - No Account
  newegg.com *
    _ c1.neweggimages.com css
    _ c1.neweggimages.com image
    noscript-spoof: _ false

CoinMarketCap
  coinmarketcap.com *
    _ graphs2.coinmarketcap.com xhr
    _ s2.coinmarketcap.com script
    _ s2.coinmarketcap.com xhr

YouTube
  youtube.com *
    _ google.com script
    _ googlevideo.com xhr
    _ s.ytimg.com script
    _ s.ytimg.com xhr

GitHub - Account
  github.com *
    _ assets-cdn.github.com css
    _ assets-cdn.github.com image
    _ assets-cdn.github.com script
    _ github-production-upload-manifest-file-7fdce7.s3.amazonaws.com xhr
    _ github-production-user-asset-6210df.s3.amazonaws.com xhr
    _ raw.githubusercontent.com xhr
    _ raw.githubusercontent.com image
    _ render.githubusercontent.com frame
    _ render.githubusercontent.com script
    _ render.githubusercontent.com xhr
    _ cloud.githubusercontent.com image
    _ user-images.githubusercontent.com image
    _ github.com cookie
    _ github.com xhr
    _ camo.githubusercontent.com image

Papa Johns
  papajohns.com *
    _ www.papajohns.com cookie
    _ www.papajohns.com script
    _ www.papajohns.com xhr

JellyKey
   jellykey.com *
    _ ajax.googleapis.com script
    _ shopify.com css
    _ shopify.com image
    _ shopify.com script
    _ squarespace.com css
    _ squarespace.com script
    _ static1.squarespace.com image
    _ store.jellykey.com script
    _ www.jellykey.com script

Firefox Add-ons - No Account
  addons.mozilla.org *
    _ addons-amo.cdn.mozilla.net css
    _ addons-amo.cdn.mozilla.net image
    _ addons-amo.cdn.mozilla.net script
    _ addons.cdn.mozilla.net image
    _ addons.cdn.mozilla.net css
    _ addons.mozilla.org xhr

Firefox Add-ons - Account
  addons.mozilla.org *
    _ addons-amo.cdn.mozilla.net css
    _ addons-amo.cdn.mozilla.net image
    _ addons-amo.cdn.mozilla.net script
    _ addons.cdn.mozilla.net image
    _ addons.mozilla.org xhr
    _ addons.mozilla.org cookie
    _ addons.cdn.mozilla.net css

Userstyles - No Account
  userstyles.org *
    _ cdnjs.cloudflare.com script
    _ userstyles.org script
    _ userstyles.org xhr

Userstyles - Account
  userstyles.org *
    _ cdnjs.cloudflare.com script
    _ userstyles.org script
    _ userstyles.org xhr
    _ userstyles.org cookie
    _ userstyles.org frame

jQuery
  jquery.com *
    _ api.jquery.com script
    _ code.jquery.com script

Mozilla Developer Network
  developer.mozilla.org *
    _ cdn.mdn.mozilla.net css
    _ cdn.mdn.mozilla.net image
    _ mdn.mozilla.net script
    _ mdn.mozillademos.org frame
    _ mdm.mozillademos.org script
    _ mdn.mozillademos.org image

Firefox Accounts
  accounts.firefox.com *
    _ accounts-static.cdn.mozilla.net image
    _ accounts-static.cdn.mozilla.net script
    _ accounts.firefox.com cookie
    _ accounts.firefox.com xhr
    _ firefoxusercontent.com image
    firefox.com accounts-static.cdn.mozilla.net css
    noscript-spoof: _ false

Udemy - Account
  udemy.com *
  _ adaptive-streaming.udemy.com xhr
  _ udemy-assets-on-demand.udemy.com media
  _ www.udemy.com cookie
  _ www.udemy.com script
  _ www.udemy.com xhr

DeviantArt
  deviantart.com
    _ 1st-party image inherit
    _ deviantart.net image allow
    _ st.deviantart.net css allow
    _ wp.com image allow

Google
  google.com *
    _ 1st-party script
    _ googleusercontent.com image
    _ kh.google.com xhr
    _ ssl.gstatic.com image
    _ www.google.com cookie
    _ www.google.com xhr
    _ www.gstatic.com script
    _ www.gstatic.com xhr
    _ www.gstatic.com image
    _ encrypted-tbn0.gstatic.com image
    ! Maps
    _ maps.googleapis.com *
    _ maps.gstatic.com image
    _ geo2.ggpht.com image
    ! Chrome Extensions
    _ chrome.google.com xhr

PNG2JPG
  png2jpg.com *
    _ png2jpg.com script
    _ png2jpg.com xhr

SplitShire
  splitshire.com *
    _ 3hsyn13u3q9dhgyrg2qh3tin-wpengine.netdna-ssl.com css
    _ 3hsyn13u3q9dhgyrg2qh3tin-wpengine.netdna-ssl.com image
    _ 3hsyn13u3q9dhgyrg2qh3tin-wpengine.netdna-ssl.com script
    _ www.splitshire.com script

Stockvault
  stockvault.net *
    _ www.stockvault.net script

Pixabay
  pixabay.com *
    _ pixabay.com script

Imcreator
  imcreator.com *
    _ app.imcreator.com media
    _ ggpht.com image
    _ imcreator.com script
    _ imcreator.com xhr

Unsplash
  unsplash.com *
    _ unsplash.com script
    _ unsplash.com xhr

Offset
  offset.com *
    _ ak.picdn.net image
    _ cdn.offset.com script
    _ offset.com cookie
    _ www.offset.com xhr

Shutterstock
  shutterstock.com *
    _ www.shutterstock.com xhr
    _ www2.shutterstock.com script

CapitalOne
  capitalone.com *
    _ bfp.capitalone.com script
    _ capitalone.com cookie
    _ myaccounts.capitalone.com script
    _ myaccounts.capitalone.com xhr
    _ verified.capitalone.com script
    _ verified.capitalone.com xhr
    _ www.capitalone.com script

Gfycat
  gfycat.com *
    _ cdn.ampproject.org script
    _ gfycat.com script
    _ giant.gfycat.com media

Packagist
  packagist.org *
    _ cdn.jsdelivr.net script
    _ m58222sh95-1.algolianet.com xhr
    _ packagist.org script

NPM
  npmjs.com *
    _ www.npmjs.com script
    _ www.npmjs.com xhr

Terminal.sexy
  terminal.sexy *
    _ terminal.sexy script
    _ terminal.sexy xhr

Stackoverflow
  stackoverflow.com *
    _ cdn.sstatic.net *
    _ i.stack.imgur.com image
    _ stackoverflow.com script
    _ stackoverflow.com xhr
    noscript-spoof: _ false

Bitwarden
  bitwarden.com *
    _ ajax.googleapis.com script
    _ bitwarden.com cookie
    _ js.braintreegateway.com script
    _ maxcdn.bootstrapcdn.com css
    _ vault.bitwarden.com script
    _ vault.bitwarden.com xhr

NexusMods - Account
  nexusmods.com *
    1st-party script
    www.nexusmods.com xhr
    nexusmods.com cookie

Stackexchange
  stackexchange.com *
    _ cdn.sstatic.net css
    _ cdn.sstatic.net image
    _ cdn.sstatic.net script
    _ ajax.googleapis.com script
    _ stackexchange.com script
    _ stackexchange.com xhr
    noscript-spoof: _ false

CNN
  cnn.com *
    _ www.cnn.com xhr
    _ www.cnn.com script
    _ www.i.cdn.cnn.com script

Tumblr - Account
  tumblr.com *
    _ assets.tumblr.com script
    _ tumblr.com cookie
    _ www.tumblr.com xhr

The Gaurdian
  theguardian.com *
    _ i.guim.co.uk image

Materialize CSS
  materializecss.com *
    _ fonts.googleapis.com css
    _ fonts.gstatic.com css
    _ lorempixel.com image
    _ materializecss.com media
    _ materializecss.com script
    _ code.jquery.com script

GitLab
  gitlab.com *
    _ 1st-party script
    _ 1st-party xhr
    _ gitlab-static.net css
    _ gitlab-static.net image
    _ gitlab-static.net script

BBC
  bbc.com *
    _ ichef.bbci.co.uk image
    _ mvt.api.bbc.com xhr
    _ mybbc.files.bbci.co.uk css
    _ mybbc.files.bbci.co.uk image
    _ mybbc.files.bbci.co.uk script
    _ nav.files.bbci.co.uk css
    _ nav.files.bbci.co.uk image
    _ nav.files.bbci.co.uk script
    _ ssl.bbc.co.uk xhr
    _ static.bbc.co.uk css
    _ static.bbc.co.uk image
    _ static.bbc.co.uk script
    _ static.bbci.co.uk css
    _ static.bbci.co.uk image
    _ static.bbci.co.uk script
    _ www.bbc.co.uk script
    _ www.bbc.com script
    _ www.bbc.com xhr

Kickstarter
  kickstarter.com *
    _ a248.e.akamai.net script
    _ d3mlfyygrfdi2i.cloudfront.net plugin
    _ js.stripe.com frame
    _ js.stripe.com script
    _ ksr-video.imgix.net plugin
    _ s3.amazonaws.com image
    _ s3.amazonaws.com plugin

Codecademy
  codecademy.com *
    _ maxcdn.bootstrapcdn.com css
    _ production.cdmycdn.com css
    _ production.cdmycdn.com image
    _ production.cdmycdn.com script
    _ codecademy.com cookie

ASP.NET
  asp.net *
    _ forums-asp.azureedge.net css

Alligator.io
  alligator.io *
    _ d33wubrfki0l68.cloudfront.net css
    _ d33wubrfki0l68.cloudfront.net image
    _ d33wubrfki0l68.cloudfront.net script

ADP
  adp.com *
    _ workforcenow.adp.com cookie
    _ workforcenow.adp.com script
    _ workforcenow.adp.com xhr
    _ workforcenow.adp.com frame

Massdrop - Account
  massdrop.com *
    _ cdn1.massdrop.com script
    _ fonts.googleapis.com css
    _ fonts.gstatic.com css
    _ massdrop-s3.imgix.net image
    _ www.massdrop.com cookie
    _ www.massdrop.com script
    _ www.massdrop.com xhr

Twitter
  twitter.com *
    _ abs-0.twimg.com script
    _ abs.twimg.com script
    _ api.twitter.com xhr
    _ a.twimg.com css
    _ ma.twimg.com image
    _ mobile.twitter.com script
    _ pbs.twimg.com image
    _ ton.twimg.com script
    _ twitter.com cookie

Reddit - Account
  reddit.com *
    _ a.thumbs.redditmedia.com image
    _ b.thumbs.redditmedia.com image
    _ reddit.com cookie
    _ www.reddit.com script
    _ www.reddit.com xhr
    _ www.redditstatic.com css
    _ www.redditstatic.com image
    _ www.redditstatic.com script

Reddit - No Account
  reddit.com *
    _ a.thumbs.redditmedia.com image
    _ b.thumbs.redditmedia.com image
    _ www.reddit.com script
    _ www.reddit.com xhr
    _ www.redditstatic.com css
    _ www.redditstatic.com image
    _ www.redditstatic.com script

ProtonMail
  protonmail.com *
    _ mail.protonmail.com cookie
    _ mail.protonmail.com script
    _ mail.protonmail.com xhr

Sitepoint
  sitepoint.com *
    _ cdn-enterprise.discourse.org css
    _ cdn-enterprise.discourse.org script
    _ www.sitepoint.com xhr

Material Icons
  material.io *
    _ material.io script
    _ material.io xhr

New York Times
  nytimes.com *
    _ g1.nyt.com script
    _ nyt.com css
    _ nyt.com image

CSS Tricks
  css-tricks.com
    _ codepen.io css
    _ codepen.io frame
    _ codepen.io script
    _ s3-us-west-2.amazonaws.com image

Creative Bloq
  creativebloq.com *
    _ cdn.mos.cms.futurecdn.net image
    _ vanilla.futurecdn.net css
    _ vanilla.futurecdn.net image
    _ vanilla.futurecdn.net script

PizzaHut
  pizzahut.com *
    _ maps.googleapis.com script
    _ www.pizzahut.com cookie
    _ www.pizzahut.com script
    _ www.pizzahut.com xhr

Scotch.io
  scotch.io *
    _ scotch.io script

Davannis - Order Online
  davannisgoldenvalley.foodtecsolutions.com *
    _ davannisgoldenvalley.foodtecsolutions.com cookie
    _ davannisgoldenvalley.foodtecsolutions.com script
    _ davannisgoldenvalley.foodtecsolutions.com xhr

MicroCenter
  microcenter.com *
    _ 60a99bedadae98078522-a9b6cded92292ef3bace063619038eb1.ssl.cf2.rackcdn.com css
    _ microcenter.com cookie
    _ rackcdn.com image
    _ www.microcenter.com script

A Geek With A Hat
  swizec.com *
    _ d3nulzlctd9uky.cloudfront.net css
    _ d3nulzlctd9uky.cloudfront.net image

Hackernoon
  hackernoon.com *
    _ hackernoon.com frame
    _ hackernoon.com script

Coinbase - Account
  coinbase.com *
    _ assets.coinbase.com script
    _ ws.coinbase.com xhr
    _ www.coinbase.com cookie
    _ www.coinbase.com script
    _ www.coinbase.com xhr

Yelp
  yelp.com *
    _ ajax.googleapis.com script
    _ www.yelp.com xhr
    _ yelpcdn.com css
    _ yelpcdn.com image
    _ yelpcdn.com script