Policy Control Javascript/Image/Flash Blocker Easily control all the network requests from an easy to use toolbar panel
Support Development
PayPal ● 
Bitcoin Address: bc1qh7juzrxrawpr65elm4qs285m5rdhnhgsn7h2jf
Lightning Address: bhjmq@getalby.com
Your Input Matters
The "Policy Control" extension helps you quickly disable and enable different types of resources such as JavaScript, CSS, and Media. The extension can be used to increase privacy as well as saving bandwidth by blocking unwanted contents.



  1. What can I expect from Policy Control extension?

    Policy Control is designed to let you easily have control over data flow in your browser. It can block certain types of requests by simply turning on a policy rule from the toolbar panel. You have either control to block all the incoming resources or just requests made by third-party servers. For advanced users, there is a filtering page to define customized blocking rules.

    Note that "Policy Control" extension does not block first-party requests. This means that websites can load whatever type of resources they need from their own server. Also, this extension does not block top-level requests hence it is not possible to block a website entirely using this extension

    "Policy Control" also does not filter any background request (background request is a request that is made by an extension or by browser itself)

  2. Why there are two types of blockage (all and third-party)?

    Well, it really depends on how you want to use Policy Control extension. If you just want to block some resources to speed-up your browser, then always use "all" blockage mode. Usually blocking images and web fonts are sufficient to enhance your browsing speed. However, if you want to improve your privacy by using the "Policy Control" extension, then it is recommended to turn on all the filtering rules for third-party hostnames. Usually, malicious scripts are not hosted by the visited domains but they are injected by third-party networks.

  3. WWhat is the meaning of "hostname" and "origin" keywords that are used in this extension?

    Consider a URL like "https://www.google.com/index.html" for instance. In this URL, "www.google.com" is the hostname and "https://www.google.com/" is the origin. For performance consideration, this extension uses the origin matching. However to enhance filtering capability you can still use one or more "*" in the filtering rules (wildcard matching).

  4. Is "Policy Control" extension useful to increase my privacy?

    Yes, Policy Control can block some important sources to prevent privacy leakage. Read more here; HTML5 APIs Fingerprint Users - How to Prevent.

  5. I am an average user concerned about my privacy and security. Is there any recommended settings for me?

    You can start with the following settings and add exceptions when needed. For isntance by using the following settings, YouTube embedded players are not being loaded. Either you need to change the global settings or add exception rules.

    WebExtension Version:
    Font (@font-face)Allow all
    ImageAllow all
    Media (audio and video)Block third-partyembedded players wont work on third-party websites
    ObjectBlock third-party
    Script (JavaScript)Block third-party
    StylesheetAllow all
    Sub Document (iframes and frames)Allow all
    XMLHttpRequestBlock third-party
    PingBlock all
    Content-Security-Policy ReportsBlock all
    WebSockerBlock third-party
    Other ResourcesBlock third-partyembedded players wont work on third-party websites

    XUL Version:
    Sub Document (iframes and frames)third-partyon

  6. I am using the "Policy Control" extension by enabling some policy rules like blocking third-party scripts, but some websites are not loading properly. What can I do?

    You have two options. If you are visiting this particular website frequently, it is recommended to add the resource(s) that may cause the website to not load properly into the white-list page. Read below to find out how to add a new rule to the white-list page. However, if you are not a frequent visitor of this page, you still have two options: Either disable all the policy rules temporarily and refresh the page (when the page is loaded, you can enable rules once again from the popup). Or you can use your browser in a private mode to browse this page (by default "Policy Control" extension is disabled in the private (incognito) mode [private mode has no access to your sensitive cookies and browser history.]). This is the recommended method.

  7. How can I add a new rule to the white-list page?

    The easiest method is to load the page and let the extension log the blocked resources for you. Now open the popup and press on the "Open Log" button. In the newly opened page, find those resources that you need to allow globally and press the "Allow" button.

    As an alternative method, you can open the popup and define a new rule just for this particular hostname. Don't forget to check the "Apply these rules for this hostname" checkbox. Now press the "Save" button. To remove site-specific rules, open the popup once the website is loaded and uncheck the box and then press the save button.

  8. Is it possible to move the toolbar button?

    Yes, there is a comprehensive guide on how to customize your Firefox in this blog post: a Comprehensive Guide to Firefox Customization.

  9. What is the badge number on the toolbar button?

    The badge indicates the number of blocked resources for the currently visited webpage. If the page is not loading properly, read FAQ 5 to let some resources pass the enabled policy rules.

  10. Why do I still get images on a website when the image rule is set to "Block all"?

    "Policy Control" blocks all the image requests that your browser is making, however, if a website uses DATA URI type images still they can be displayed by your browser (note that no image is fetched by browser; these images are embedded in the HTML file and hence there is no web-request is fetched for them)

  11. [JPM Version ONLY] How can I read a Policy Rule in the panel?

    Lets take a look at an example: Font (@font-face) on all, off. Basically there are two settings per each policy rule. The first one is all or third-party which indicates the scope of the rule. Whether all resources are supposed to be blocked or only resources requested by third-party websites on a top level domain. The other control is on and off. This control indicates whether a policy rule is enabled (on) or it is disabled (off). Note that after installation, all the policy rules are off. Meaning there is no blockage at all. You have to manually turn on a rule and this selection is permanent until you decide to turn it off.

Matched Content


Please keep reviews clean, avoid improper language, and do not post any personal information. Also, please consider sharing your valuable input on the official store.

What's new in this version

Change Logs:
    Last 10 commits on GitHub
    Hover over a node to see more details

    Need help?

    If you have questions about the extension, or ideas on how to improve it, please post them on the  support site. Don't forget to search through the bug reports first as most likely your question/bug report has already been reported or there is a workaround posted for it.

    Open IssuesIssuesForks

    Editorial Review

    The name in itself may just sound boring or bookish, but no doubt about it, this add-on brings a whole new life to the way in which your perceive web page tools or the different resources around it. Simply put the add-on allows you to instantly enable or even disable various web site building scripts like JavaScript and covers codes such as CSS and even Media.

    Policy Control has a very simpled UI; however, it is very powerful in nature. After installation, a toolbar panel will be added to your Firefox browser. From there you can simply toggle all sort of resources on and off. One very handy feature of this extension is the way it allows you to have control over the data flow. For instance most tracking scripts are usually offered by third-party websites. The extension provides ability to identify and block such requests based on their type and source. Although blocking these resources on third-party websites are generally a good practice, however there are some well-known websites out there that require these resources to function. Policy Control offers two unique workarounds in situations like this. First you can allow an specific script for a single website or even better you can entirely disable Policy Control on the private browsing mode. This coupled with the ability to block unwanted adverts and messages will increase your privacy and also enable you to save on bandwidth.

    All together it's a pretty neat add-on which gives you a lot of functionality along with flexibility as well.

    Recent Blog Posts