Add a version of CheckLoadURI that takes a source principal instead of a source

URI.  Update a bunch of callers to use it.  Bug 233108, r=caillon, sr=dveditz
This commit is contained in:
bzbarsky@mit.edu
2004-04-25 16:55:27 +00:00
parent c22465d949
commit d6a2a440ea
19 changed files with 138 additions and 82 deletions

View File

@@ -628,7 +628,7 @@ nsXMLContentSink::LoadXSLStyleSheet(nsIURI* aUrl)
return NS_ERROR_FAILURE;
}
return mXSLTProcessor->LoadStyleSheet(aUrl, loadGroup, mDocumentURI);
return mXSLTProcessor->LoadStyleSheet(aUrl, loadGroup, mDocument->GetPrincipal());
}
nsresult
@@ -664,8 +664,9 @@ nsXMLContentSink::ProcessStyleLink(nsIContent* aElement,
NS_ENSURE_SUCCESS(rv, rv);
nsIScriptSecurityManager *secMan = nsContentUtils::GetSecurityManager();
rv = secMan->CheckLoadURI(mDocumentURI, url,
nsIScriptSecurityManager::ALLOW_CHROME);
rv = secMan->
CheckLoadURIWithPrincipal(mDocument->GetPrincipal(), url,
nsIScriptSecurityManager::ALLOW_CHROME);
NS_ENSURE_SUCCESS(rv, NS_OK);
rv = secMan->CheckSameOriginURI(mDocumentURI, url);