rem: openUILink( this.imageURL, e ); 
add: try { if (this.docURL != gBrowser.currentURI) { const secMan = Components.classes["@mozilla.org/scriptsecuritymanager;1"] .getService(Components.interfaces.nsIScriptSecurityManager); const nsIScriptSecMan = Components.interfaces.nsIScriptSecurityManager; secMan.checkLoadURI(gBrowser.currentURI, makeURI(this.imageURL), nsIScriptSecMan.DISALLOW_SCRIPT); } openUILink( this.imageURL, e ); } catch(e) {} 
context:     viewImage : function (e) {        urlSecurityCheck( this.imageURL, this.docURL );        openUILink( this.imageURL, e );    },
meta: 9421	/local1/tlutelli/issta_data/temp/all_js/javascript/2006_temp/2006/9421/e0d55405783b56e83046a0ebf34ad84a7d760613/browser.js/buggy/browser/base/content/browser.js