CVS commit by vriezen: 

'javascript:xxx' urls generate the content of the document. So there is
not a need for kapp->authorizeURLAction, as we stay in the same domain as
the parent document.
Reviewed by Waldo Bastian (thanks!)


  M +1 -1      dom_docimpl.cpp   1.309


--- kdelibs/khtml/xml/dom_docimpl.cpp  #1.308:1.309
@@ -2128,5 +2128,5 @@ bool DocumentImpl::isURLAllowed(const QS
 
     // do we allow this suburl ?
-    if ( !kapp || !kapp->authorizeURLAction("redirect", w->part()->url(), newURL) )
+    if ( !kapp || (newURL.protocol() != "javascript" && !kapp->authorizeURLAction("redirect", w->part()->url(), newURL)) )
         return false;