Site permissions

To make sure you can browse the internet safely and conveniently, the browser applies different processing rules to website elements (it blocks pop-ups, warns you when a website requests your location, etc.). You can change how your browser acts for all sites or one in particular using either the Protect toolbar or your settings. For example, you can prevent all sites from launching JavaScript or allow a particular site to access your camera.

  1. Which handling rules can be changed
  2. Changes the handling rules for the current site
  3. Changing handling rules for all sites
  4. Setting and deleting exceptions for selected sites

Which handling rules can be changed

  • For the current site: You can change the handling rules for the main list of elements in the Protect toolbar.
  • For all sites: You can change the handling rules for a broader list of elements in your settings.

Elements that you can manage using the Protect toolbar

Content settings Handling rules
By default Alternative rules
User location
  • Ask permission — when a website tries to detect your location, the browser will ask you to allow data transfer.
  • Allow — lets a site (like Yandex.Maps) detect your location without asking for permission every time.
  • Block — does not allow the website to determine your location.
Camera
  • Ask permission — If a website (for example, a portal for video conferences) tries to access your camera, the browser will warn you.
  • Allow — lets the website automatically access your camera. For an HTTP website, this setting will remain for the duration of your session, while HTTPS websites will be able to access your camera during future sessions as well.
  • Block — does not allow the website to access your camera.
Microphone
  • Ask permission — If a website (for example, a portal for video conferences) tries to access your microphone, the browser will warn you.
  • Allow — lets the website automatically access your microphone. For an HTTP website, this setting will remain for the duration of your session, while HTTPS websites will be able to access your microphone during future sessions as well.
  • Block — does not allow the website to access your microphone.
Notifications
  • Ask permission — the first time a website tries to send a notification, the browser will ask for your permission to show them. In Incognito mode, the browser blocks notifications from all websites.
  • Allow — lets a website (such as Yandex.Calendar) show notifications.
  • Block — does not allow the website to show notifications.
JavaScript
  • Allow — launching JavaScript is allowed by default.
  • Block — does not allow the website to launch JavaScript. Some JavaScript scripts steal passwords and infect the computer. This option allows you to block the website from running any JavaScript. It will enhance security but can prevent the website from working correctly.
Flash plugin
  • Always detect important content on this site — by default, the browser blocks only plugins unrelated to the main content of the page, such as banners on the side panel.
  • Allow — by default, the content of all plugins is launched automatically.
  • Block — do not allow plugins to run automatically so that you can block vulnerable and dangerous plugins.
Images
  • Allow — by default, images are displayed.
  • Block — does not allow website to show images. It will load faster without images.
Pop-up windows
  • Block — by default, pop-ups are blocked, as they clutter the screen and are often used for banner ads. If the site tries to open pop-up windows, the SmartBox displays the icon.
  • Allow — the website will be allowed to open pop-up windows.
Background sync
  • Allow — by default, devices are synced in the background.
  • Block — prevents background browser syncing on all devices.
Automatic downloads
  • Ask permission — if immediately after downloading the first file, a website tries to download a second one, the browser will warn you.
  • Allow — lets the website automatically download multiple files without asking for permission each time.
  • Block — do not allow the website to download files, except for those you have selected.
MIDI devices
  • Ask permission — the browser will warn you if a website requests access to electronic musical instruments that use the MIDI interface.
  • Allow — grants a site automatic access to MIDI devices.
  • Block — does not allow the website to access MIDI devices.
Content settings Handling rules
By default Alternative rules
User location
  • Ask permission — when a website tries to detect your location, the browser will ask you to allow data transfer.
  • Allow — lets a site (like Yandex.Maps) detect your location without asking for permission every time.
  • Block — does not allow the website to determine your location.
Camera
  • Ask permission — If a website (for example, a portal for video conferences) tries to access your camera, the browser will warn you.
  • Allow — lets the website automatically access your camera. For an HTTP website, this setting will remain for the duration of your session, while HTTPS websites will be able to access your camera during future sessions as well.
  • Block — does not allow the website to access your camera.
Microphone
  • Ask permission — If a website (for example, a portal for video conferences) tries to access your microphone, the browser will warn you.
  • Allow — lets the website automatically access your microphone. For an HTTP website, this setting will remain for the duration of your session, while HTTPS websites will be able to access your microphone during future sessions as well.
  • Block — does not allow the website to access your microphone.
Notifications
  • Ask permission — the first time a website tries to send a notification, the browser will ask for your permission to show them. In Incognito mode, the browser blocks notifications from all websites.
  • Allow — lets a website (such as Yandex.Calendar) show notifications.
  • Block — does not allow the website to show notifications.
JavaScript
  • Allow — launching JavaScript is allowed by default.
  • Block — does not allow the website to launch JavaScript. Some JavaScript scripts steal passwords and infect the computer. This option allows you to block the website from running any JavaScript. It will enhance security but can prevent the website from working correctly.
Flash plugin
  • Always detect important content on this site — by default, the browser blocks only plugins unrelated to the main content of the page, such as banners on the side panel.
  • Allow — by default, the content of all plugins is launched automatically.
  • Block — do not allow plugins to run automatically so that you can block vulnerable and dangerous plugins.
Images
  • Allow — by default, images are displayed.
  • Block — does not allow website to show images. It will load faster without images.
Pop-up windows
  • Block — by default, pop-ups are blocked, as they clutter the screen and are often used for banner ads. If the site tries to open pop-up windows, the SmartBox displays the icon.
  • Allow — the website will be allowed to open pop-up windows.
Background sync
  • Allow — by default, devices are synced in the background.
  • Block — prevents background browser syncing on all devices.
Automatic downloads
  • Ask permission — if immediately after downloading the first file, a website tries to download a second one, the browser will warn you.
  • Allow — lets the website automatically download multiple files without asking for permission each time.
  • Block — do not allow the website to download files, except for those you have selected.
MIDI devices
  • Ask permission — the browser will warn you if a website requests access to electronic musical instruments that use the MIDI interface.
  • Allow — grants a site automatic access to MIDI devices.
  • Block — does not allow the website to access MIDI devices.

Elements that you can manage from your settings

In your settings, you can manage all elements found in the Protect toolbar as well as change handling rules for the following elements:

Website element Handling rules
By default Alternative
Cookie files
  • Allowed — by default, all websites are allowed to save cookies.
  • Block — you can block a website from collecting information about you (such as your username, password, or browsing data). Blocking cookies can prevent the website from working correctly.
  • Allowed only for this session — cookies will be deleted immediately after you close the browser.
Protocol processing
  • Allowed — by default, protocol handlers (for example, webcal or mailto) are allowed to operate when you click special links.
  • Not allowed — protocol processing will be banned on all sites.
Protected content
  • Allow protected content to play — by default, copy-protected electronic books, music, and soon are played in the browser.
  • Allow use of device IDs — by default, the device ID is checked when playing protected content.
  • Do not allow protected content to play.
  • Do not allow checking the device ID when opening protected content.
Plugin access to computer
  • Askpermission — by default, all plugins launch inside the test environment. If you open an infected page, malicious code can't move beyond your browser and infect your computer. Sometimes a plugin needs access to a computer outside of the test environment, such as in cases of video streaming. In this case the browser will ask for your permission.
  • Allowed — allow a website to use plugins to access your computer directly.
  • Not allowed — do not allow a website to use plugins to access your computer outside the test environment.
USB devices You can connect a site to a USB device (in order to, for example, save heart-rate monitor data found on a webpage).
  • Follow the Sites advanced settings link to view and configure connected devices.
Website element Handling rules
By default Alternative
Cookie files
  • Allowed — by default, all websites are allowed to save cookies.
  • Block — you can block a website from collecting information about you (such as your username, password, or browsing data). Blocking cookies can prevent the website from working correctly.
  • Allowed only for this session — cookies will be deleted immediately after you close the browser.
Protocol processing
  • Allowed — by default, protocol handlers (for example, webcal or mailto) are allowed to operate when you click special links.
  • Not allowed — protocol processing will be banned on all sites.
Protected content
  • Allow protected content to play — by default, copy-protected electronic books, music, and soon are played in the browser.
  • Allow use of device IDs — by default, the device ID is checked when playing protected content.
  • Do not allow protected content to play.
  • Do not allow checking the device ID when opening protected content.
Plugin access to computer
  • Askpermission — by default, all plugins launch inside the test environment. If you open an infected page, malicious code can't move beyond your browser and infect your computer. Sometimes a plugin needs access to a computer outside of the test environment, such as in cases of video streaming. In this case the browser will ask for your permission.
  • Allowed — allow a website to use plugins to access your computer directly.
  • Not allowed — do not allow a website to use plugins to access your computer outside the test environment.
USB devices You can connect a site to a USB device (in order to, for example, save heart-rate monitor data found on a webpage).
  • Follow the Sites advanced settings link to view and configure connected devices.

Changes the handling rules for the current site

You can change an element-handling rule for the current site in the Protect toolbar.

  1. Open the webpage.
  2. In the SmartBox, click the connection status icon.
  3. The Protect panel opens. In the connection status section, click Learn more.
  4. Find the site element in the Permissions section.
  5. Select the option you need in the drop-down list: Block, Permit, On or Off.

Then you will see that option for the changed element in the Protect window that appears. It is easy to turn an option on or off, but this setting will only apply to the current site.

Changing handling rules for all sites

Element processing rules for all sites can be changed in the browser settings:

  1. Tap  → Settings.
  2. Open Websites.
  3. At the bottom of the page, click Advanced site settings.
  4. Set your element processing rules.

Setting and deleting exceptions for selected sites

If browser rules interfere with how you use a website, you can set an exception for that site. For example, you can allow Yandex.Maps to determine your location automatically, but have all other sites ask for your permission.

To set an exception:

  1. Tap  → Settings.
  2. Open Websites.
  3. At the bottom of the page, click Advanced site settings.
  4. In the section with the name of the desired element, click Sites advanced settings.
  5. Go to the Allowed or Not allowed tab and click Add in the upper-right corner.
  6. Enter the website address in the box. You can use masks for setting an address. For example, if you write https://[*.]example.ru/, the exception will be valid for a domain and all of its subdomains:
  7. Click Add.
    Note. You can always move a site from the "Allowed" to "Not allowed" list, and vice versa. To do this, hover your mouse cursor over the website and click Deny or Allow to the right.

To remove an exception:

  1. Tap  → Settings.
  2. Open Websites.
  3. At the bottom of the page, click Advanced site settings.
  4. In the section with the name of the desired element, click Sites advanced settings.
  5. Hover your mouse over the required website and click the Remove link that appears to the right .