rem:  setTimeout(function(u) { gURLBar.value = u; handleURLBarCommand(); }, 0, url); 
add: try { gURLBar.value = url; var uri = makeURI(gURLBar.value); const secMan = Components.classes["@mozilla.org/scriptsecuritymanager;1"] .getService(Components.interfaces.nsIScriptSecurityManager); const nsIScriptSecMan = Components.interfaces.nsIScriptSecurityManager; secMan.checkLoadURI(gBrowser.currentURI, uri, nsIScriptSecMan.DISALLOW_SCRIPT_OR_DATA); handleURLBarCommand(); } catch (ex) {} 
context:   onDrop: function (aEvent, aXferData, aDragSession)    {      var url = transferUtils.retrieveURLFromData(aXferData.data, aXferData.flavour.contentType);      // The URL bar automatically handles inputs with newline characters,      // so we can get away with treating text/x-moz-url flavours as text/unicode.      if (url) {        getBrowser().dragDropSecurityCheck(aEvent, aDragSession, url);        // XXXBlake Workaround caret crash when you try to set the textbox's value on dropping        setTimeout(function(u) { gURLBar.value = u; handleURLBarCommand(); }, 0, url);      }    },
meta: 9421	/local1/tlutelli/issta_data/temp/all_js/javascript/2006_temp/2006/9421/28955aa4a64988a7851bf1f0dd5895b7b6f0d304/browser.js/buggy/browser/base/content/browser.js