From 89a619e5c6df544a081b9ccbaae76e33b4143c24 Mon Sep 17 00:00:00 2001 From: teramako Date: Thu, 18 Jun 2009 16:19:11 +0000 Subject: security fix: Components.util.Sandbox(window) can use xpconnect git-svn-id: http://svn.coderepos.org/share/lang/javascript/vimperator-plugins/trunk@34032 d0d07461-0603-4401-acd4-de1884942a52 --- _libly.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to '_libly.js') diff --git a/_libly.js b/_libly.js index b17b73c..b8a56d7 100644 --- a/_libly.js +++ b/_libly.js @@ -231,7 +231,7 @@ libly.$U = {//{{{ var fnc = window.eval; var sandbox; try { - sandbox = new Components.utils.Sandbox(window); + sandbox = new Components.utils.Sandbox("about:blank"); if (Components.utils.evalInSandbox('true', sandbox) === true) { fnc = function(text) { return Components.utils.evalInSandbox(text, sandbox); }; } -- cgit v1.2.3