Building a UMatrix Replacement

· web · Source ↗

TLDR

  • Developer prototypes matrix³, an MV3 Chrome extension replacing uMatrix using declarativeNetRequest and Content Security Policy injection.

Key Takeaways

  • uMatrix was deprecated because uBlock Origin covered its feature set; uBO Lite (MV3) dropped the advanced request-blocking capability entirely.
  • MV3 removes blocking webRequest callbacks, but declarativeNetRequest rules are flexible enough to replicate uMatrix-style subresource control.
  • The design injects custom Content-Security-Policy headers via declarativeNetRequest, offloading enforcement to the browser.
  • CSP’s report-to directive feeds violation reports back to the extension, populating the allow/deny list without a persistent background script.
  • matrix³ is a dependency-free prototype: git clone and Load Unpacked in Chrome.

Hacker News Comment Review

  • No substantive HN discussion yet.

Original | Discuss on HN