If you go to untrusted sites with javascript off then temporarily allow an object on it to run when pressing the red toolbar button to turn permissions off the object keeps running unless you manually also hit the refresh button.
The only way to get around this is to keep javascript on for sites with objects or right click Noscript options/Blocked Objects and manually allow the bottom domain. That's annoying when you have a page with a lot of objects on them, e.g. youtube videos.
An example is this Java test page:
Code: Select all
http://www.bodo.com/javame.htm