Allow url (not hash!) sensitive javascript functions