Is "No" ok with you?
I don't want to firewall every host on the network in their own little bubble but it looks like that time is here.
I like the idea of the dialog box. Can they added that to "This web page wants to load external Javascript. Please enter all the remote sites that it is allowed to talk to". I would be ok with that. Add the same thing for cookies.