1. Domain name whitelisting (as opposed to blacklisting) should be supported. Remember NoScript.
2. A priori, the user should manage his own geolocation data, which he can choose to disclose. Firefox must not attempt to automatically figure out a user’s geolocation data by asking a remote service provider. This is similar to the default blacklisting of dangerous web sites by comparing their URLs to a local, infrequently updated database instead of communicating with Google in every single instance.

The browser must be given priority over the web server.