Brave blocks cross-site canvas by default under their "Device recognition" option. You can also block first-party canvas access.