You're just adding things that probably aren't within the scope of the project. For instance graceful fallback is a 'nice to have' but not necessary. If you de

You're just adding things that probably aren't within the scope of the project. For instance graceful fallback is a 'nice to have' but not necessary. If you deny flash or javascript, essentially most sites simply break. I imagine a native client plugin would have the same results if you don't enable it. As for white listing, why can't it simply be handled with the same dialogs used for whitelisting all the other existing extensions per site?