bug 191773, r=mstoltz, a=dbaron@dbaron.org

only allow x-jsd: urls from chrome: and resource:
This commit is contained in:
rginda%netscape.com 2003-02-05 01:27:56 +00:00
parent 03cc66394b
commit c1745c244e

View File

@ -1235,7 +1235,8 @@ nsScriptSecurityManager::CheckLoadURI(nsIURI *aSourceURI, nsIURI *aTargetURI,
{ "gopher", AllowProtocol },
{ "datetime", DenyProtocol },
{ "finger", AllowProtocol },
{ "res", DenyProtocol }
{ "res", DenyProtocol },
{ "x-jsd", ChromeProtocol }
};
NS_NAMED_LITERAL_STRING(errorTag, "CheckLoadURIError");