We need to allow JavaScript on feed pages explicitly. Otherwise are those pages broken on higher security levels.