rem: nodeView._content.document.location = url; window.close(); 
add:    var safeurls = /(^http(s)?:|^file:|^chrome:|^resource:|^mailbox:|^imap:|^news:|^about:|^mailto:|^ftp:|^gopher:)/i; if (url.search(safeurls) == 0) { var secMan = Components.classes["@mozilla.org/scriptsecuritymanager;1"].getService(). QueryInterface(nsIScriptSecurityManager); try { secMan.checkLoadURIStr(nodeView._content.document.location, url, nsIScriptSecurityManager.STANDARD); } catch (e) { return; } nodeView._content.document.location = url; window.close(); } 
context: function openLink(node){    var url = node.getAttribute("value");    nodeView._content.document.location = url;    window.close();}
meta: 10234	/local1/tlutelli/issta_data/temp/all_js/javascript/2006_temp/2006/10234/e7a7f83a4af1158896926a41442b10ffb7244a5e/metadata.js/buggy/xpfe/browser/resources/content/metadata.js