bug 342205 (SeaMonkey version of 268370) prevent leaks of install-dir from nsSidebar exceptions.

Firefox patch by gavin, r=mconnor, a=kairo and iann
This commit is contained in:
dveditz%cruzio.com 2006-08-17 21:29:59 +00:00
parent e3a5021823
commit a61d6db035

View File

@ -106,7 +106,7 @@ function (aContentURL)
function sidebarURLSecurityCheck(url) function sidebarURLSecurityCheck(url)
{ {
if (url.search(/(^http:|^ftp:|^https:)/) == -1) if (!/(^http:|^ftp:|^https:)/i.test(url))
throw "Script attempted to add sidebar panel from illegal source"; throw "Script attempted to add sidebar panel from illegal source";
} }
@ -262,7 +262,7 @@ function (engineURL, iconURL, suggestedTitle, suggestedCategory)
catch(ex) catch(ex)
{ {
debug(ex); debug(ex);
this.promptService.alert(null, "Failed to add the search engine."); this.promptService.alert(null, "Error", "Failed to add the search engine.");
throw Components.results.NS_ERROR_INVALID_ARG; throw Components.results.NS_ERROR_INVALID_ARG;
} }