Bug 91043: Make document.write(ln) same-origin-access only to prevent inserting content into a third-party page. r=pavlov, sr=dveditz
git-svn-id: svn://10.0.0.236/trunk@134768 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
@@ -292,8 +292,6 @@ pref("capability.policy.default.History.toString", "UniversalBrowserRead");
|
||||
|
||||
pref("capability.policy.default.HTMLDocument.close", "allAccess");
|
||||
pref("capability.policy.default.HTMLDocument.open", "allAccess");
|
||||
pref("capability.policy.default.HTMLDocument.write", "allAccess");
|
||||
pref("capability.policy.default.HTMLDocument.writeln", "allAccess");
|
||||
|
||||
pref("capability.policy.default.Location.hash.set", "allAccess");
|
||||
pref("capability.policy.default.Location.href.set", "allAccess");
|
||||
|
||||
Reference in New Issue
Block a user