mirrors/zotero
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Don't load javascript: and data: URIs from URI field

Browse source
This commit is contained in:
Dan Stillman 2010-10-09 20:33:55 +00:00
parent 490794dfb9
commit f0d58fa948
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
chrome/content/zotero/overlay.js
View file

@ -2557,6 +2557,11 @@ var ZoteroPane = new function()
* shift-click == new window, no modifier == frontmost tab * shift-click == new window, no modifier == frontmost tab
*/ */
function loadURI(uri, event, data) { function loadURI(uri, event, data) {
// Ignore javascript: and data: URIs
if (uri.match(/^(javascript|data):/)) {
return;
}
if (Zotero.isStandalone && uri.match(/^https?/)) { if (Zotero.isStandalone && uri.match(/^https?/)) {
var io = Components.classes['@mozilla.org/network/io-service;1'] var io = Components.classes['@mozilla.org/network/io-service;1']
.getService(Components.interfaces.nsIIOService); .getService(Components.interfaces.nsIIOService);