security fix: Components.util.Sandbox(window) can use xpconnect

git-svn-id: http://svn.coderepos.org/share/lang/javascript/vimperator-plugins/trunk@34032 d0d07461-0603-4401-acd4-de1884942a52

1 files changed, 1 insertions, 1 deletions

diff --git a/wassr.js b/wassr.js
index 24a934f..451a9b6 100644
--- a/wassr.js
+++ b/wassr.js
@@ -38,7 +38,7 @@
     var passwordManager = Cc["@mozilla.org/login-manager;1"].getService(Ci.nsILoginManager);

     var evalFunc = window.eval;

     try {

-        var sandbox = new Components.utils.Sandbox(window);

+        var sandbox = new Components.utils.Sandbox("about:blank");

         if (Components.utils.evalInSandbox("true", sandbox) === true) {

             evalFunc = function(text) {

                 return Components.utils.evalInSandbox(text, sandbox);