I’ve been thinking that SaaS companies that provide JS code to embed could work around this by letting you attach a subdomain; so instead
Of the js pointing to say adroll.com, it would point to ads.adrollcustomer.com (with dns set up to goto adroll.)