I've thought about this before, since NoScript is too disruptive for me. One iss... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

laughinghan on June 6, 2019 | parent | context | favorite | on: Plausible Deniability and Gaslighting in Fighting ...

I've thought about this before, since NoScript is too disruptive for me. One issue is that it's common for scripts to served from assets.whateverwebsite.com. I also thought of allowing anything from the same second-level domain (so anything on .whateverwebsite.com), but that would allow anything on .co.uk. ¯\_(ツ)_/¯ in Chrome I trust, for now.

naniwaduni on June 6, 2019 [–]

Sounds like a job for the public suffix list.

laughinghan on June 6, 2019 | [–]

Ooh, cool, hadn't heard of that before! TIL.

But even with the added complexity of regularly pulling in the public suffix list, the problems keep going: e.g., facebook.com's scripts are all served from static.xx.fbcdn.net.

Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact