Comment by microtonal

I good compromise is uMatrix, which by default only allows first-party JavaScript and cookies and makes it easy to quickly enable JavaScript/XDR/cookies when necessary using a point and click matrix:

https://github.com/gorhill/uMatrix