security fix: Components.util.Sandbox(window) can use xpconnect

git-svn-id: http://svn.coderepos.org/share/lang/javascript/vimperator-plugins/trunk@34032 d0d07461-0603-4401-acd4-de1884942a52

1 files changed, 1 insertions, 1 deletions

diff --git a/commandBookmarklet.js b/commandBookmarklet.js
index 829c9cd..18adf93 100644
--- a/commandBookmarklet.js
+++ b/commandBookmarklet.js
@@ -98,7 +98,7 @@ function toBoolean (value, def) {
 }
 
 function evalInSandbox (str) {
-  let sandbox = new Components.utils.Sandbox(buffer.URL);
+  let sandbox = new Components.utils.Sandbox("about:blank");
   sandbox.__proto__ = content.window.wrappedJSObject;
   return Components.utils.evalInSandbox(str, sandbox);
 }