add: urlSecurityCheck(href, gBrowser.currentURI.spec, Ci.nsIScriptSecurityManager.DISALLOW_SCRIPT_OR_DATA); 
context:   subscribeToFeed: function(href, event) {    // Just load the feed in the content area to either subscribe or show the    // preview UI    if (!href)      href = event.target.getAttribute("feed");    this.loadFeed(href, event);  },
meta: 9421	/local1/tlutelli/issta_data/temp/all_js/javascript/2006_temp/2006/9421/29bde1aeab25c6f259284c44b523274a703182d2/browser.js/buggy/browser/base/content/browser.js