Don't forget that sometimes you need to allow the site's CDN domain as well. The problem with Noscript is that it doesn't seem to differentiate between allowin

Don't forget that sometimes you need to allow the site's CDN domain as well. The problem with Noscript is that it doesn't seem to differentiate between allowing a domain when it's actually a site you're visiting (say, facebook.com) and when it's a domain that a completely different site is trying to load content from. A straight whitelist is too "dumb" for today's web.