Don't forget that you can whitelist domains, or disable/enable them per session.