NoScript to the rescue, it can block all kinds of embedded content, even custom fonts.