so this is really a cross-origin blocker + whitelist.<p>I wonder if google fonts and jquery CDN and such will get whitelisted. I don&#x27;t think they should be, but not doing so will break websites even more than flash blocked by default.<p>I have to say if it&#x27;s called &quot;tracking protection&quot; it leads to a false sense of security. Browser fingerprinting (and cookies) on the websites you visit still works. The ad-distributer might no longer track you, but sites still can.<p>A first counterattack on this might also be self-hosted tracking scripts that than push the data to google analytics or the ad-network or whoever demands that you let them track your users to use their service.