Whitelist XHR which are not trackers

[rhanka]

Some website may be legitimate to call tierce APIs. Tracker detection function is very precious for detecting privacy potential problems

Nevertheless, it count all API calls as "trackers" which is a bug my point of view. e.g https://stats.judilibre.io handles 17 API calls which are considered by dashloard as trackers, those are false positives.

[revolunet]

Hi, our allowlist is defined here : https://github.com/SocialGouv/thirdparties-action/blob/master/src/analyze.js#L7 we can add some exceptions for non gouv.fr domains