PUBLIC MARKS from decembre with tags faq & cross-site-scripping

Q: I'm worried by the fact some sites require the akamai.net domain to be whitelisted. I'd prefer not to allow it everywhere, but only on some parent sites I trust. How can I do it? __ A: You can use ABE to this effect, by adding the following rule to your NoScript Options|Advanced|ABE USER ruleset: Site .akamai.net __ Accept INCLUSION from SELF++ ___ Accept INCLUSION from .trusted-site1.com .trusted-site2.com trusted-site3.com ____ Deny ___ Notice the leading dot "." before domains, which is syntactic sugar for site.com *.site.com, i.e. a domain and its subdomains. ____ It should also be noted that, independently from this rule, external scripts are never loaded from pages which don't belong to a whitelisted site, hence no malicious website you didn't explicitly whitelisted could execute scripts from akamai.net anyway. ___