[cdh]

You might want to consider switching to the uMatrix extension instead. My understanding is that uMatrix rules can be created to apply to all domains.