µMatrix - the HTTP Switchboard successor

uMatrix v1.1.12 Released
https://github.com/gorhill/uMatrix/releases/tag/1.1.12
Download - v1.1.12 - Firefox (AMO)
Download - v1.1.12 - Chrome (Web Store)

Edit: v1.1.10:

Edit 2: v1.1.12

 

New version 1.1.12 with minor improvements.

Definitely worth mentioning are a couple of nice new mini-guides which help to configure uMatrix to your liking. Well done, @gorhill

 

https://www.ghacks.net/2017/11/28/a-umatrix-guide-for-firefox/

 

Can someone confirm if uMatrix will be developed only as a web extension?
I ask because that would make it unavailable with Palemoon which is a shame.

Thanks.

 

uM is WE since 1.1.0
https://addons.mozilla.org/en-US/firefox/addon/umatrix/versions/

palemoon? go to its forum and cry there a river.
in fact it is no longer possible to add legacy extension since june/july - not allowed. why should mozilla take care of unofficial forks?
PM decided to resist on the legacy model, simple as that. or wait for basilisk.

 

since uMatrix v1.1.4:

 

Thanks.
I was hoping @gorhill would do with uMatrix what he's (still) doing with uBlock: maintain a legacy extension along the web one.

 

In the coming verson the user agent switcher will be removed.
And a new feature will be added: "Spoof <noscript> tags when 1st-party scripts are blocked".
It is a available as a global setting and can be enabled/disabled on a per-scope basis.
If enabled, <noscript>-sections will be executed if Javascript is disabled/blocked by uMatrix.
https://github.com/gorhill/uMatrix/releases/tag/1.1.13b1

 

uMatrix v1.1.18 Released (December 6, 2017)
https://github.com/gorhill/uMatrix/releases/tag/1.1.18
Download - v1.1.18 - Firefox (AMO)
Download - v1.1.18 - Chrome (Web Store)
The user agent switcher is now gone (as mentioned above #658) and the logger can now be opened in a separate window (as with uBlockO)
Edit: v1.1.18

 

uMatrix v1.1.20 Released (December 13, 2017)

Download - v1.1.20 - Firefox (AMO)
Download - v1.1.20 - Chrome (Web Store)

 

uMatrix v1.2.0 Released (January 4, 2017)

Download - v1.2.0 - Firefox (AMO)
Download - v1.2.0 - Chrome (Web Store)

 

There is an interesting thread on the gHacks-user.js github site:

Q: What does NS have (or will have) that uBo+uM don't

Particularly interesting is Pants' post regarding XSS and gorhill's reply thereafter.

 

Malicious websites might try to access local services on your computer, your router or services in your LAN over adresses like "http://localhost..." or "http://192.168.1.1...". ABE in Noscript can prevent those types of attack - but it's not yet available in the Noscript webextension. However, corresponding rules can be easily added to uMatrix (source):

Code:

# uMatrix
# Prevent Internet sites from requesting LAN resources.

* 127.0.0.1 * block
* localhost * block
* [::1]     * block       // block access to ipv6 localhost
* 192.168   * block       // block access to LAN 192.168.x.x

# Accept from LOCAL

127.0.0.1 127.0.0.1 * allow
localhost localhost * allow
[::1]     [::1]     * allow
192.168   192.168   * allow

In order to block access to, e.g., your Fritzbox router you might add these rules:

Code:

* fritz.box * block
fritz.box fritz.box * allow

For other routers those rules have to be modified accordingly.

Corresponding filters are also possible in uBlock Origin (source):

Code:

||127.0.^$important,third-party
||localhost^$important,third-party
||[::1]^$important,third-party
||192.168.^$important,third-party

... and:

Code:

||fritz.box^$important,third-party

EDIT: @gorhill : Wouldn't it make sense to add the first rules by default to uMatrix and uBO?

 

thank you.

 

Thank you @summerheat for posts #662 + 663.

 

Also Gorhill's musings lower down re Decentraleyes ...

As per: https://github.com/Synzvato/decentraleyes/wiki/Frequently-Asked-Questions, when I copied:

Code:

* ajax.googleapis.com * noop
* ajax.aspnetcdn.com * noop
* ajax.microsoft.com * noop
* cdnjs.cloudflare.com * noop
* code.jquery.com * noop
* cdn.jsdelivr.net * noop
* yastatic.net * noop
* yandex.st * noop
* libs.baidu.com * noop
* lib.sinaapp.com * noop
* upcdn.b0.upaiyun.com * noop

into uMatrix ''My Rules", these become ... * allow - is this the correct/desired setting for Decentraleyes?
e.g. * ajax.googleapis.com * allow

 

uMatrix doesn't know about the setting noop. But yes, allow is correct and Decentraleyes is working:

 

Aha, thanks @mood.

The test (forgot about that) confirms.

 

Yes, I'm not sure why Synzvato changed that site: In older versions it also contained specific rules for uMatrix:

Code:

* ajax.aspnetcdn.com script allow
* ajax.googleapis.com script allow
* ajax.microsoft.com script allow
* cdn.jsdelivr.net script allow
* cdnjs.cloudflare.com script allow
* code.jquery.com script allow
* lib.sinaapp.com script allow
* libs.baidu.com script allow
* upcdn.b0.upaiyun.com script allow
* yandex.st script allow
* yastatic.net script allow

These are the rules I'm using.

EDIT: @Synzvato : Is there a reason why you changed that?

 

Thanks @summerheat.

I have '* allow' now, not 'script allow', for those domains. Let's see if he responds ... if he hangs out here.

 

uMatrix v1.3.2 Released (January 22, 2018)

Download - v1.3.2 - Firefox (AMO)
Download - v1.3.2 - Chrome (Web Store)
Download - v1.3.0 - Opera (Opera Add-ons)

 

For convenience uMatrix considers "noop" to be an alias of "allow", so it will be properly converted when you add a rule with "noop" instead of "allow".

 

FWIW, the gHacks user.js wiki now also covers that.

However, I noticed that I'm unable to add the

Code:

[::1]     [::1]     * allow

rule. uMatrix does not save it. @gorhill : Is this rule incorrect or is this a bug?

 

You must be using the dev build of uMatrix? I confirm a regression bug in it with regard to parsing rules with IPv6 address.

 

Yes, indeed, I'm using v. 1.3.3b7. Thanks for confirming this