Alternative: block all third party objects (script files, iframes, images, the works) except those from sources on a white-list so libraries on CDNs function.

Looks like I finally need to get around to researching the options for this.

I'll have to stick with the more naive DNS blacklist based blocking for network wide protection though, as I don't want to tell others to use something more aggressive then have to support "this site doesn't work!" requests.