so this is really a cross-origin blocker + whitelist. I wonder if google fonts and jquery CDN and such will get whitelisted. I don't think they should be, but

so this is really a cross-origin blocker + whitelist. I wonder if google fonts and jquery CDN and such will get whitelisted. I don't think they should be, but not doing so will break websites even more than flash blocked by default. I have to say if it's called "tracking protection" it leads to a false sense of security. Browser fingerprinting (and cookies) on the websites you visit still works. The ad-distributer might no longer track you, but sites still can. A first counterattack on this might also be self-hosted tracking scripts that than push the data to google analytics or the ad-network or whoever demands that you let them track your users to use their service.