Skip to content
Few Seconds Focus Back to site

docs / rules

How a rule matches, and which one wins

Two kinds of entry, one tie-breaker. That's the whole system, and it's worth two minutes because it's how exceptions work.

the two kinds of entry

entry kind matches
reddit.com domain every page on the host and its subdomains, so old.reddit.com is covered without typing it
youtube domain no dot, so it is read as a brand: every subdomain and every country domain of it. Deliberately narrow enough that apple does not catch apple.stackexchange.com
youtube.com/playlist path prefix only URLs starting with that path
youtube.com/watch?v=… path prefix a single video, if you want that. The query is part of the prefix, and it keeps its capitals — video ids are case-sensitive

The more specific rule wins, and allow beats block at equal specificity. So block youtube.com, allow youtube.com/playlist?list=PL…, and the one playlist you actually need stays open while the rest of the site holds.

the tie-breaker, exactly

Specificity has two levels, not many: a path-prefix rule is more specific than a domain rule, and that is the whole ranking. Two path-prefix rules are equally specific however long they are — so between them, allow wins.

That is what makes an exception work at all. It also means a longer block does not override a shorter allow. If you have allowed youtube.com/playlist and you want one playlist inside it held, a longer block rule will not do it; move the allow down to the specific playlists you want instead.

Rules are evaluated per group, and a group's rules are read in full before one wins — the first match does not end the search.

two worked examples

Block YouTube, keep the one playlist you need for work

  • block youtube.com · domain
  • allow youtube.com/playlist?list=PLrAXtmErZgOeiKm4sgNOknGvNjby9efdf · path prefix

The playlist opens without a hold. Everything else on YouTube, including the videos in that playlist opened from the watch page, holds — the watch URL does not start with the playlist prefix.

Hold the news front page, not the article somebody sent you

  • block theguardian.com · domain
  • allow theguardian.com/technology/ · path prefix

One section stays open and the front page — the part that is designed to keep you there — does not.

what is never matched

Browser pages are excluded before any rule is read: chrome:, about:, file:, view-source:, extension pages, data:, blob:, mailto: and tel:. You cannot lock yourself out of your own settings, and a rule that would match one of those simply never fires.

Back to how it works