Checking in one-line, fix for 219029

patch from Ian Neal <bugzilla@arlen.demon.co.uk>, r=caillon, sr=jst


git-svn-id: svn://10.0.0.236/trunk@147447 18797224-902f-48f8-a5cc-f745e15eee43

mozilla/xpfe/communicator/resources/content/contentAreaUtils.js

@@ -137,10 +137,11 @@ function openNewTabWith(url, sendReferrer, reverseBackgroundPref)
 
     var browserWin = windowMediator.getMostRecentWindow("navigator:browser");
 
-    // if there's no existing browser window, open this url in one, and
-    // return
+    // if there's no existing browser window, then, as long as
+    // we are allowed to, open this url in one and return
     //
     if (!browserWin) {
+      urlSecurityCheck(url, document);
       window.openDialog(getBrowserURL(), "_blank", "chrome,all,dialog=no", 
                         url, null, referrer);
       return;