diff --git a/4.2.2-uBlock-Origin.md b/4.2.2-uBlock-Origin.md
index 66c5977..acef06a 100644
--- a/4.2.2-uBlock-Origin.md
+++ b/4.2.2-uBlock-Origin.md
@@ -1,6 +1,6 @@
 Best practice is to default deny-all, then whitelist.
 
-### :small_orange_diamond: Rules
+### :large_orange_diamond: Rules
 
 - block all remote fonts. This is the bottom right panel option (the symbol is an A). Now any site you REALLY need to see the icons (it's usually pretty clear without them), you can set an exception.
 ```
@@ -14,7 +14,7 @@ no-remote-fonts: * true
 * * 3p-script block
 ```
 
-### :small_orange_diamond: Filters
+### :large_orange_diamond: Filters
 
 <details><summary>what appear to be tracking images on startpage and ixquick - click to expand</summary><p>
 
@@ -31,4 +31,14 @@ no-remote-fonts: * true
 ||/english/web/$image,important,domain=ixquick.com|ixquick.eu|startpage.com
 ||/tix2/$image,important,domain=ixquick.com|ixquick.eu|startpage.com
 ||/tst2/*$image,important,domain=ixquick.com|ixquick.eu|startpage.com
-```
\ No newline at end of file
+```
+
+- Workers
+   * If you have uMatrix [1.2.0+](https://github.com/gorhill/uMatrix/releases/tag/1.2.0) on [FF58+](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/worker-src), there is a new switch: "Forbid web workers"
+   * `dom.workers.enabled` was [deprecated](https://bugzilla.mozilla.org/1434934) in FF60
+   * Prevent workers everywhere (first line below)
+   * Exception, do not prevent workers on `example.org` (second line below)
+```
+*$csp=worker-src 'none'
+@@||example.org^$csp=worker-src 'none'
+```