rem: urlSecurityCheck(this.imageURL, doc.nodePrincipal); saveImageURL(this.imageURL, null, "SaveImageTitle", false, false, doc.documentURIObject); 
add: if (this.onCanvas) {  saveImageURL(this.target.toDataURL(), "canvas.png", "SaveImageTitle", true, false, doc.documentURIObject); } else { urlSecurityCheck(this.imageURL, doc.nodePrincipal); saveImageURL(this.imageURL, null, "SaveImageTitle", false, false, doc.documentURIObject); } 
context:   saveImage: function() {    var doc =  this.target.ownerDocument;    urlSecurityCheck(this.imageURL, doc.nodePrincipal);    saveImageURL(this.imageURL, null, "SaveImageTitle", false,                 false, doc.documentURIObject);  },
meta: 10234	/local1/tlutelli/issta_data/temp/all_js/javascript/2007_temp/2007/10234/07d69f7ad8b0604f8918ececb1a9f5dce86e2b67/nsContextMenu.js/buggy/browser/base/content/nsContextMenu.js