It loads jquery from ajax.googleapis.com (I'd prefer it didn't, but ohwell). Other than that, you only need the domain unblocked for it to work (I also block js by default because I do not like it :) ).