I whitelist after visiting a page, if it breaks majorly so I can’t use it. And often I only need to allow the main page’s scripts and maybe video., img. or cdn. subdomains.