rem: var uri = makeURI(gURLBar.value); const secMan = Components.classes["@mozilla.org/scriptsecuritymanager;1"] .getService(Components.interfaces.nsIScriptSecurityManager); 
context:   onDrop: function (aEvent, aXferData, aDragSession)    {      var url = transferUtils.retrieveURLFromData(aXferData.data, aXferData.flavour.contentType);      // The URL bar automatically handles inputs with newline characters,      // so we can get away with treating text/x-moz-url flavours as text/unicode.      if (url) {        getBrowser().dragDropSecurityCheck(aEvent, aDragSession, url);        try {          gURLBar.value = url;          var uri = makeURI(gURLBar.value);          const secMan = Components.classes["@mozilla.org/scriptsecuritymanager;1"]                                   .getService(Components.interfaces.nsIScriptSecurityManager);          const nsIScriptSecMan = Components.interfaces.nsIScriptSecurityManager;          secMan.checkLoadURI(gBrowser.currentURI, uri, nsIScriptSecMan.DISALLOW_SCRIPT_OR_DATA);          handleURLBarCommand();        } catch (ex) {}      }    },
meta: 9421	/local1/tlutelli/issta_data/temp/all_js/javascript/2006_temp/2006/9421/468004360d2e0a709bf2d3e2fd98accc95c30fd7/browser.js/clean/browser/base/content/browser.js