{"id":17963356,"url":"https://github.com/kristerkari/umatrix-recipes","last_synced_at":"2026-01-18T22:01:08.143Z","repository":{"id":66126012,"uuid":"104256298","full_name":"kristerkari/umatrix-recipes","owner":"kristerkari","description":"\"uMatrix Recipes\" is a collection of rules for uMatrix that you can use to fix some popular websites by whitelisting the 3rd-party requests that are critical for the websites to function.","archived":false,"fork":false,"pushed_at":"2019-10-30T20:57:25.000Z","size":16,"stargazers_count":108,"open_issues_count":4,"forks_count":5,"subscribers_count":11,"default_branch":"master","last_synced_at":"2025-04-03T19:24:18.598Z","etag":null,"topics":["collection","umatrix","umatrix-rules"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kristerkari.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-09-20T19:00:39.000Z","updated_at":"2024-11-13T22:05:40.000Z","dependencies_parsed_at":null,"dependency_job_id":"500172cf-b8a5-4354-a561-5619845fa01c","html_url":"https://github.com/kristerkari/umatrix-recipes","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/kristerkari/umatrix-recipes","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kristerkari%2Fumatrix-recipes","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kristerkari%2Fumatrix-recipes/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kristerkari%2Fumatrix-recipes/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kristerkari%2Fumatrix-recipes/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kristerkari","download_url":"https://codeload.github.com/kristerkari/umatrix-recipes/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kristerkari%2Fumatrix-recipes/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28552107,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-18T20:59:07.572Z","status":"ssl_error","status_checked_at":"2026-01-18T20:59:02.799Z","response_time":98,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["collection","umatrix","umatrix-rules"],"created_at":"2024-10-29T11:35:05.449Z","updated_at":"2026-01-18T22:01:08.122Z","avatar_url":"https://github.com/kristerkari.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# uMatrix Recipes\n\n\u003e uMatrix put you in full control of where your browser is allowed to connect,\n\u003e what type of data it is allowed to download, and what it is allowed to\n\u003e execute. Nobody else decides for you: You choose. You are in full control of\n\u003e your privacy.\n\n**[uMatrix](https://github.com/gorhill/uMatrix)** is a great browser extension\nthat by default blocks website's 3rd-party requests and allows you to whitelist\n3rd-party requests for each website.\n\nUsing uMatrix is good for your privacy, but it also breaks most of the websites\nby blocking critial scripts or assets.\n\n\"uMatrix Recipes\" is a collection of rules that you can use to fix some popular\nwebsites by whitelisting the 3rd-party requests that are critical for the\nwebsites to function.\n\nSources for some of the rules:\n\n* https://github.com/gorhill/uMatrix/wiki/Examples-of-useful-rulesets\n* https://github.com/Rictusempra/uMatrix-Rules\n\n### How to whitelist a website:\n\n1.  Go to uMatrix's settings.\n2.  Go to \"My rules\" tab.\n3.  Click \"Edit\" button in \"Temporary rules\".\n4.  Copy/paste any of the rules from here to the end of the list.\n5.  Click \"Save\" and then \"Commit\".\n\n## Social media\n\n### Facebook\n\n**allow Facebook ONLY on Facebook, blocked everywhere else**\n\n```\n* facebook.com * block\n* facebook.net * block\nfacebook.com facebook.com * allow\nfacebook.com fbcdn.net * allow\n```\n\n### Twitter\n\n**allow Twitter ONLY on Twitter, blocked everywhere else**\n\n```\n* twitter.com * block\ntwitter.com abs.twimg.com script allow\ntwitter.com ton.twimg.com script allow\ntwitter.com twitter.com * allow\ntwitter.com video.twimg.com plugin allow\ntwitter.com video.twimg.com xhr allow\n```\n\n### Youtube\n\nYoutube + log in (using accounts.google.com)\n\n```\naccounts.google.com ssl.gstatic.com xhr allow\nyoutube.com googlevideo.com xhr allow\nyoutube.com googlevideo.com media allow\nyoutube.com s.ytimg.com script allow\nyoutube.com www.gstatic.com script allow\nyoutube.com ytimg.com image allow\n```\n\n### Twitch\n\nTwitch + login/signup\n\n```\ntwitch.tv google.com image allow\ntwitch.tv google.com script allow\ntwitch.tv google.com xhr allow\ntwitch.tv gstatic.com script allow\ntwitch.tv passport-cdn.ttvnw.net script allow\ntwitch.tv 0914.global.ssl.fastly.net script allow\ntwitch.tv 0914.global.ssl.fastly.net xhr allow\ntwitch.tv algolia.net script allow\ntwitch.tv algolia.net xhr allow\ntwitch.tv algolianet.com script allow\ntwitch.tv algolianet.com xhr allow\ntwitch.tv polyfill.twitchsvc.net script allow\ntwitch.tv s.jtvnw.net image allow\ntwitch.tv sctatic.twitchcdn.net script allow\ntwitch.tv sentinel.twitchsvc.net xhr allow\ntwitch.tv static-cdn.jtvnw.net image allow\ntwitch.tv static.twitchcdn.net css allow\ntwitch.tv static.twitchcdn.net image allow\ntwitch.tv static.twitchcdn.net script allow\ntwitch.tv ttvnw.net xhr allow\ntwitch.tv web-cdn.ttvnw.net script allow\n```\n\nTwitch without login\n\n```\ntwitch.tv 0914.global.ssl.fastly.net script allow\ntwitch.tv 0914.global.ssl.fastly.net xhr allow\ntwitch.tv algolia.net script allow\ntwitch.tv algolia.net xhr allow\ntwitch.tv algolianet.com script allow\ntwitch.tv algolianet.com xhr allow\ntwitch.tv polyfill.twitchsvc.net script allow\ntwitch.tv s.jtvnw.net image allow\ntwitch.tv sctatic.twitchcdn.net script allow\ntwitch.tv sentinel.twitchsvc.net xhr allow\ntwitch.tv static-cdn.jtvnw.net image allow\ntwitch.tv static.twitchcdn.net css allow\ntwitch.tv static.twitchcdn.net image allow\ntwitch.tv static.twitchcdn.net script allow\ntwitch.tv ttvnw.net xhr allow\ntwitch.tv web-cdn.ttvnw.net script allow\n```\n\n### LinkedIn\n\n**allow LinkedIn ONLY on LinkedIn, blocked everywhere else**\n\n```\n* linkedin.com * block\nlinkedin.com linkedin.com * allow\nlinkedin.com static.licdn.com script allow\nlinkedin.com static.licdn.com xhr allow\n```\n\n## Messaging\n\n### Slack\n\n**Info**\n\n* User agent spoof does not work reliably at slack.com as the web app checks for\n  browser version from user agent.\n\n```\nua-spoof: slack.com false\nslack.com slack-edge.com css allow\nslack.com slack-edge.com image allow\nslack.com slack-edge.com script allow\nslack.com slack-msgs.com xhr allow\nslack.com slack.global.ssl.fastly.net media allow\nslack.com universal.slack-core.com xhr allow\n```\n\n## File sharing\n\n### Dropbox\n\n```\ndropbox.com 127.0.0.1 xhr allow\ndropbox.com cfl.dropboxstatic.com script allow\ndropbox.com cfl.dropboxstatic.com xhr allow\ndropbox.com dl.dropboxusercontent.com frame allow\ndropbox.com www.dropboxstatic.com script allow\n```\n\n## Developer\n\n### Github\n\n```\ngithub.com assets-cdn.github.com css allow\ngithub.com assets-cdn.github.com image allow\ngithub.com assets-cdn.github.com script allow\ngithub.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com xhr allow\ngithub.com github-production-user-asset-6210df.s3.amazonaws.com xhr allow\ngithub.com raw.githubusercontent.com xhr allow\ngithub.com render.githubusercontent.com frame allow\ngithub.com render.githubusercontent.com script allow\ngithub.com render.githubusercontent.com xhr allow\n```\n\n### Gitlab\n\n```\ngitlab.com assets.gitlab-static.net script allow\n```\n\n## Crowdsourcing\n\n### Kickstarter\n\n**3rd-party services to whitelist:**\n\n* [Akamai](https://en.wikipedia.org/wiki/Akamai_Technologies) Content Delivery\n  Network\n* [Amazon Web Services (AWS) S3](https://en.wikipedia.org/wiki/Amazon_S3)\n* [Amazon's Cloudfront](https://en.wikipedia.org/wiki/Amazon_CloudFront) Content\n  Delivery Network\n* [Imgix](https://www.imgix.com) Service\n* [Stripe](https://stripe.com) payments\n\n```\nkickstarter.com a248.e.akamai.net script allow\nkickstarter.com d3mlfyygrfdi2i.cloudfront.net plugin allow\nkickstarter.com js.stripe.com frame allow\nkickstarter.com js.stripe.com script allow\nkickstarter.com ksr-video.imgix.net plugin allow\nkickstarter.com s3.amazonaws.com image allow\nkickstarter.com s3.amazonaws.com plugin allow\n```\n\n### Patreon\n\n**Info**\n\n* Uses Google's reCAPTCHA for login\n* Supports posting Youtube videos\n\n**3rd-party services to whitelist:**\n\n* [Google's reCAPTCHA](https://en.wikipedia.org/wiki/ReCAPTCHA)\n* [Youtube](https://en.wikipedia.org/wiki/YouTube)\n\n```\npatreon.com cdnjs.cloudflare.com script allow\npatreon.com google.com frame allow\npatreon.com google.com image allow\npatreon.com google.com script allow\npatreon.com google.com xhr allow\npatreon.com googlevideo.com xhr allow\npatreon.com gstatic.com script allow\npatreon.com youtube.com frame allow\npatreon.com youtube.com script allow\npatreon.com youtube.com xhr allow\n```\n\n## Languages\n\n### Duolingo\n\n**3rd-party services to whitelist:**\n\n* [Amazon's Cloudfront](https://en.wikipedia.org/wiki/Amazon_CloudFront) Content\n  Delivery Network\n* [CNDJS](https://github.com/cdnjs/cdnjs) Content Delivery Network\n\n```\nduolingo.com cdnjs.cloudflare.com script allow\nduolingo.com d1vq87e9lcf771.cloudfront.net media allow\nduolingo.com d35aaqx5ub95lt.cloudfront.net media allow\nduolingo.com d35aaqx5ub95lt.cloudfront.net script allow\nduolingo.com d35aaqx5ub95lt.cloudfront.net xhr allow\nduolingo.com d3kwyfyztuo0xs.cloudfront.net xhr allow\nduolingo.com d7mj4aqfscim2.cloudfront.net media allow\nduolingo.com d7mj4aqfscim2.cloudfront.net script allow\nduolingo.com d7mj4aqfscim2.cloudfront.net xhr allow\nduolingo.com ljknv3sref.execute-api.us-east-1.amazonaws.com xhr allow\n```\n\n### LingQ\n\n**Info**\n\n* You can not access the site without whitelisting google.com\n* If you try to spoof referer, you will be logged out and ask to fill reCAPTCHA.\n* Uses Youtube for lessons with videos\n\n**3rd-party services to whitelist:**\n\n* [Amazon Web Services (AWS) S3](https://en.wikipedia.org/wiki/Amazon_S3)\n* [Google APIs](https://en.wikipedia.org/wiki/Google_APIs)\n* [Google's reCAPTCHA](https://en.wikipedia.org/wiki/ReCAPTCHA)\n* [CNDJS](https://github.com/cdnjs/cdnjs) Content Delivery Network\n* [Youtube](https://en.wikipedia.org/wiki/YouTube)\n\n```\nreferrer-spoof: lingq.com false\nlingq.com ajax.googleapis.com script allow\nlingq.com amazonaws.com * allow\nlingq.com cdnjs.cloudflare.com script allow\nlingq.com google.com cookie allow\nlingq.com google.com frame allow\nlingq.com google.com image allow\nlingq.com google.com script allow\nlingq.com google.com xhr allow\nlingq.com googlevideo.com xhr allow\nlingq.com gstatic.com css allow\nlingq.com gstatic.com script allow\nlingq.com s.ytimg.com script allow\nlingq.com www.youtube.com css allow\nlingq.com www.youtube.com frame allow\nlingq.com www.youtube.com image allow\nlingq.com www.youtube.com script allow\nlingq.com www.youtube.com xhr allow\n```\n\n### Mango Languages\n\n**3rd-party services to whitelist:**\n\n* [Amazon's Cloudfront](https://en.wikipedia.org/wiki/Amazon_CloudFront) Content\n  Delivery Network\n* [Amazon Web Services (AWS) S3](https://en.wikipedia.org/wiki/Amazon_S3)\n* Google's translation API\n* [Adobe's Typekit](https://typekit.com/)\n\n```\nmangolanguages.com d10lpsik1i8c69.cloudfront.net script allow\nmangolanguages.com d1w9q16ymlsf74.cloudfront.net frame allow\nmangolanguages.com d1w9q16ymlsf74.cloudfront.net script allow\nmangolanguages.com d1w9q16ymlsf74.cloudfront.net xhr allow\nmangolanguages.com mango-assets-production.s3.amazonaws.com xhr allow\nmangolanguages.com translation.googleapis.com xhr allow\nmangolanguages.com use.typekit.net script allow\n```\n\n## Graphics\n\n### Zeplin\n\n**Info**\n\n* Throws an error if Stripe does not get loaded.\n* Uses Pusher for real time updates.\n\n**3rd-party services to whitelist:**\n\n* [Stripe](https://stripe.com) payments\n* [Pusher](https://pusher.com) service\n\n```\nzeplin.io checkout.stripe.com frame allow\nzeplin.io checkout.stripe.com script allow\nzeplin.io checkout.stripe.com xhr allow\nzeplin.io ws-zeplin.pusher.com xhr allow\n```\n\n## Bookmarking services\n\n### Pocket\n\n**Info**\n\n* You can not login without whitelisting reCAPTCHA.\n\n**3rd-party services to whitelist:**\n\n* [Google's reCAPTCHA](https://en.wikipedia.org/wiki/ReCAPTCHA)\n\n```\ngetpocket.com google.com frame allow\ngetpocket.com google.com image allow\ngetpocket.com google.com script allow\ngetpocket.com google.com xhr allow\ngetpocket.com www.gstatic.com script allow\n```\n\n### Instapaper\n\n**3rd-party services to whitelist:**\n\n* [Amazon Web Services (AWS) S3](https://en.wikipedia.org/wiki/Amazon_S3)\n\n```\ninstapaper.com staticinstapaper.s3.amazonaws.com script allow\n```\n\n## Question \u0026 Answer websites\n\n### Stack Overflow\n\n**3rd-party services to whitelist:**\n\n* [Google APIs](https://en.wikipedia.org/wiki/Google_APIs)\n\n```\nstackoverflow.com ajax.googleapis.com script allow\nstackoverflow.com cdn.sstatic.net script allow\n```\n\n## Presentation sharing\n\n### Speakerdeck\n\n**3rd-party services to whitelist:**\n\n* [Amazon's Cloudfront](https://en.wikipedia.org/wiki/Amazon_CloudFront) Content\n  Delivery Network\n\n```\nspeakerdeck.com d2dfho4r6t7asi.cloudfront.net script allow\n```\n\n## Social networking\n\n### Meetup\n\n**3rd-party services to whitelist:**\n\n* [Amazon's Cloudfront](https://en.wikipedia.org/wiki/Amazon_CloudFront) Content\n  Delivery Network\n\n```\nmeetup.com dna8twue3dlxq.cloudfront.net script allow\nmeetup.com secure.meetupstatic.com script allow\nmeetup.com secure.meetupstatic.com xhr allow\n```\n\n## Hotels / renting services\n\n### AirBnB\n\n```\nairbnb.com a0.muscache.com script allow\nairbnb.com maps.googleapis.com script allow\n```\n\n## Music\n\n### Bandcamp\n\n```\nbandcamp.com s4.bcbits.com script allow\nbandcamp.com t4.bcbits.com media allow\n```\n\n### Soundcloud\n\n```\nsoundcloud.com a-v2.sndcdn.com script allow\nsoundcloud.com a-v2.sndcdn.com xhr allow\nsoundcloud.com cf-hls-media.sndcdn.com xhr allow\nsoundcloud.com i1.sndcdn.com xhr allow\nsoundcloud.com style.sndcdn.com xhr allow\nsoundcloud.com wis.sndcdn.com xhr allow\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkristerkari%2Fumatrix-recipes","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkristerkari%2Fumatrix-recipes","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkristerkari%2Fumatrix-recipes/lists"}