Whitelisting is still practicable. I use NoScript, and if I have to whitelist scripts from two domains of the company operating the site, while keeping those of the 40 other domains blocked, I still gain something.