security fix: Components.util.Sandbox(window) can use xpconnect

git-svn-id: http://svn.coderepos.org/share/lang/javascript/vimperator-plugins/trunk@34032 d0d07461-0603-4401-acd4-de1884942a52

1 files changed, 1 insertions, 1 deletions

diff --git a/_libly.js b/_libly.js
index b17b73c..b8a56d7 100644
--- a/_libly.js
+++ b/_libly.js
@@ -231,7 +231,7 @@ libly.$U = {//{{{
         var fnc = window.eval;
         var sandbox;
         try {
-            sandbox = new Components.utils.Sandbox(window);
+            sandbox = new Components.utils.Sandbox("about:blank");
             if (Components.utils.evalInSandbox('true', sandbox) === true) {
                 fnc = function(text) { return Components.utils.evalInSandbox(text, sandbox); };
             }