mirror of
https://github.com/mozilla/gecko-dev.git
synced 2025-03-03 07:01:19 +00:00

88153 - keep javascript URLs in Page Info dialog from running with system principal by making the iframe's source about:blank initially and sandboxing it with type=content. sr=blake, r=mstoltz. 88417 - Disallow setting of location.host and other location subparts cross-domain r=mstoltz, sr=jst.