Files:

caps/include/nsScriptSecurityManager.h
	caps/src/nsScriptSecurityManager.cpp
	modules/libpref/src/init/all.js
Fix
24565 nsScriptSecurityManager::GetSecurityLevel() is a performance
24567 re-write DOM glue security checks to avoid NS_WITH_SERVICE()
r=waterson

Files:
	dom/src/base/nsGlobalWindow.cpp
	layout/base/src/nsDocument.cpp
	layout/base/src/nsGenericElement.cpp
Fix assertion failure for 1-character property names.


Files:
	dom/src/jsurl/nsJSProtocolHandler.cpp
	webshell/src/nsDocLoader.cpp
Fix 18653 "javascript:" URLs cross windows problems (probably regressi
r=nisheeth

Files:
	layout/events/src/nsEventListenerManager.cpp
Fix
23834 document.onkeypress allows sniffing keystrokes
24152 document.onclick shows links from other window
r=joki


git-svn-id: svn://10.0.0.236/trunk@58429 18797224-902f-48f8-a5cc-f745e15eee43

mozilla/uriloader/base/nsDocLoader.cpp

@@ -45,6 +45,7 @@
 
 #include "nsIURILoader.h"
 #include "nsCURILoader.h"
+#include "nsIIOService.h"
 
 // XXX ick ick ick
 #include "nsIContentViewerContainer.h"
@@ -346,9 +347,19 @@ nsDocLoaderImpl::LoadDocument(nsIURI * aUri,
     if (NS_SUCCEEDED(rv)) {
       nsCOMPtr<nsIChannel> pChannel;
       nsCOMPtr<nsIInterfaceRequestor> requestor (do_QueryInterface(aContainer));
+
+      // Create a referrer URI
+      nsCOMPtr<nsIURI> referrer;
+      if (aReferrer) {
+        nsAutoString tempReferrer(aReferrer);
+        char* referrerStr = tempReferrer.ToNewCString();
+        pNetService->NewURI(referrerStr, nsnull, getter_AddRefs(referrer));
+        Recycle(referrerStr);
+      }
+
       rv = pNetService->NewChannelFromURI(aCommand, aUri, mLoadGroup, requestor,
-                                        aType, nsnull /* referring uri */, 0, 0,
-                                        getter_AddRefs(pChannel));
+                                          aType, referrer /* referring uri */, 0, 0,
+                                          getter_AddRefs(pChannel));
       if (NS_FAILED(rv)) return rv; // uhoh we were unable to get a channel to handle the url!!!
       
       // figure out if we need to set the post data stream on the channel...right now,