You allow scripts on sites that require them, as needed. Maybe you allow a few big domains like cloudfront. Let's use CNN as an example. I load their mobile si

You allow scripts on sites that require them, as needed. Maybe you allow a few big domains like cloudfront. Let's use CNN as an example. I load their mobile site with scripts blocked, and I see a menu with links that lead to mostly-broken news sections. So I allow scripts from cnn.com, and the frontpage loads normally. The links work, and I can even see the puppy bowl headline's gif. When I check which sites were blocked from loading JavaScript, there are 20 domains: ads-twitter.com, adsafeprotected.com, bounceexchange.com, casalemedia.com, cnn.io (probably okay?), cookielaw.org, etc... Most modern sites have dependencies that don't really seem necessary. Social media, ad networks, telemetry...whatever those sites want to do, I don't really need it to read a news story.