133170 - Need to re-check host for security on a redirect after a call to

XMLHttpRequest.open(). For xmlextras, r=heikki, sr=jband. For caps,
r=bzbarsky, sr=jst
147754 - Add same-origin check to XMLSerializer. Patch by jst. r=mstoltz,
sr=jband
113351 - Add same-origin check to XSL Include. Patch by peterv and jst,
r=mstoltz, sr=rpotts
135267 - Add same-origin check to stylesheets included via LINK tags.
r=dveditz, sr=scc


git-svn-id: svn://10.0.0.236/trunk@123373 18797224-902f-48f8-a5cc-f745e15eee43

mozilla/caps/include/nsScriptSecurityManager.h

@@ -285,6 +285,11 @@ public:
 
     JSContext* GetSafeJSContext();
 
+    static nsresult
+    SecurityCompareURIs(nsIURI* aSourceURI,
+                        nsIURI* aTargetURI,
+                        PRBool* result);
+
 private:
 
     static JSBool JS_DLL_CALLBACK
@@ -299,7 +304,8 @@ private:
     GetBaseURIScheme(nsIURI* aURI, char** aScheme);
 
     static nsresult 
-    ReportErrorToConsole(nsIURI* aTarget);
+    ReportError(JSContext* cx, const nsAString& messageTag,
+                nsIURI* aSource, nsIURI* aTarget);
 
     nsresult
     GetRootDocShell(JSContext* cx, nsIDocShell **result);
@@ -314,8 +320,9 @@ private:
                             void** aCachedClassPolicy);
 
     nsresult
-    CheckSameOrigin(JSContext* aCx, nsIPrincipal* aSubject, 
-                    nsIPrincipal* aObject, PRUint32 aAction);
+    CheckSameOriginDOMProp(nsIPrincipal* aSubject, 
+                           nsIPrincipal* aObject,
+                           PRUint32 aAction);
     
     PRInt32 
     GetSecurityLevel(nsIPrincipal *principal,