It might not be perfect, but allowing only web workers (if you agree on getting push notifications from a page) might be the solution.