aboutsummaryrefslogtreecommitdiffstats
path: root/haiku.js
diff options
context:
space:
mode:
authorteramako2009-06-18 16:19:11 +0000
committerteramako2009-06-18 16:19:11 +0000
commit89a619e5c6df544a081b9ccbaae76e33b4143c24 (patch)
treed6f6a448024b8418cb1376e72bcd5c21695e5791 /haiku.js
parent09c2737e16b8b95b8e82d748b78ecd8f2404735d (diff)
downloadvimperator-plugins-89a619e5c6df544a081b9ccbaae76e33b4143c24.tar.bz2
security fix: Components.util.Sandbox(window) can use xpconnect
git-svn-id: http://svn.coderepos.org/share/lang/javascript/vimperator-plugins/trunk@34032 d0d07461-0603-4401-acd4-de1884942a52
Diffstat (limited to 'haiku.js')
-rw-r--r--haiku.js2
1 files changed, 1 insertions, 1 deletions
diff --git a/haiku.js b/haiku.js
index 359b2bb..026d08f 100644
--- a/haiku.js
+++ b/haiku.js
@@ -63,7 +63,7 @@ The script allows you to update Haiku status from Vimperator.
var evalFunc = window.eval;
var statuses = null;
try {
- var sandbox = new Components.utils.Sandbox(window);
+ var sandbox = new Components.utils.Sandbox("about:blank");
if (Components.utils.evalInSandbox("true", sandbox) === true) {
evalFunc = function(text) {
return Components.utils.evalInSandbox(text, sandbox);