fix for #168136. r=mstoltz, sr=dveditz.

for pref controlled schemes, allow access if source scheme is chrome or res.
needed for the new "view filter log UI".
This commit is contained in:
sspitzer%netscape.com 2002-09-12 20:27:07 +00:00
parent 40b3b839fe
commit b7337fe62b

View File

@ -1255,6 +1255,11 @@ nsScriptSecurityManager::CheckLoadURI(nsIURI *aSourceURI, nsIURI *aTargetURI,
mSecurityPref->SecurityGetBoolPref("security.checkloaduri", &doCheck);
if (doCheck)
{
// resource: and chrome: are equivalent, securitywise
if ((PL_strcmp(sourceScheme, "chrome") == 0) ||
(PL_strcmp(sourceScheme, "resource") == 0))
return NS_OK;
ReportError(nsnull, errorTag, aSourceURI, aTargetURI);
return NS_ERROR_DOM_BAD_URI;
}