I only want to allow JavaScript to run on select domains. For Iceweasel, I simply use NoScript. However, it seems that the domain-specific JS policies that I add in Konqueror do not work. For example, consider Youtube. I have tried adding the following domains:

Code: Select all

youtube.com
ytimg.com
www.youtube.com
http://www.youtube.com/
*youtube.com/*


For each of these, I set the policy to "Allow" and chose "Allow" on all radio buttons below. However, when I try to watch a video, it says that JS is not enabled. When I enable JS globally, the videos will play.

Since there are far more domains that I want to forbid, it makes sense that I want to "deny" by default and add exceptions for certain sites.

Is this even possible in Konqueror?

It is possible than the javascript files are hosted on other servers, and Konqueror's definition of "source server" is far more strict than other browsers.

Can you please check to ensure that the JS files are hosted on the servers you have listed?

I opened Youtube in Iceweasel with NoScript turned on. It was only allowing scripts for youtube.com and ytimg.com, and the videos worked. Of course, this is only one example. I can't tell whether JS works on Gmail because it goes to the lo-fi HTML-only version by default on Konqueror.

This appears to be a bug in Konqueror unfortunately. Please report this at bugs.kde.org if it hasn't been already.

Submitted: https://bugs.kde.org/show_bug.cgi?id=207406