It initially blocks all, and you can choose to allow js from domains on a case by case basis.<p>For example, on the Hacker News main page, i allow js from ycombinator.com and forbid js from co2stats.com