mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-12 04:45:45 +00:00
bug 342205 (SeaMonkey version of 268370) prevent leaks of install-dir from nsSidebar exceptions.
Firefox patch by gavin, r=mconnor, a=kairo and iann
This commit is contained in:
parent
e3a5021823
commit
a61d6db035
@ -106,7 +106,7 @@ function (aContentURL)
|
|||||||
|
|
||||||
function sidebarURLSecurityCheck(url)
|
function sidebarURLSecurityCheck(url)
|
||||||
{
|
{
|
||||||
if (url.search(/(^http:|^ftp:|^https:)/) == -1)
|
if (!/(^http:|^ftp:|^https:)/i.test(url))
|
||||||
throw "Script attempted to add sidebar panel from illegal source";
|
throw "Script attempted to add sidebar panel from illegal source";
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -262,7 +262,7 @@ function (engineURL, iconURL, suggestedTitle, suggestedCategory)
|
|||||||
catch(ex)
|
catch(ex)
|
||||||
{
|
{
|
||||||
debug(ex);
|
debug(ex);
|
||||||
this.promptService.alert(null, "Failed to add the search engine.");
|
this.promptService.alert(null, "Error", "Failed to add the search engine.");
|
||||||
throw Components.results.NS_ERROR_INVALID_ARG;
|
throw Components.results.NS_ERROR_INVALID_ARG;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user