I've seen these Mac Defender and Mac Protector popups on some reputable sites, so I'm not sure it's the site that is "permitting" it. I think the trojan is taking advantage of some JavaScript vulnerability.