rem: getBrowser().dragDropSecurityCheck(aEvent, aDragSession, url); 
add: nsDragAndDrop.dragDropSecurityCheck(aEvent, aDragSession, url); 
context:   onDrop: function (aEvent, aXferData, aDragSession)    {      var url = transferUtils.retrieveURLFromData(aXferData.data, aXferData.flavour.contentType);      // The URL bar automatically handles inputs with newline characters,      // so we can get away with treating text/x-moz-url flavours as text/unicode.      if (url) {        getBrowser().dragDropSecurityCheck(aEvent, aDragSession, url);        try {          gURLBar.value = url;          const nsIScriptSecMan = Components.interfaces.nsIScriptSecurityManager;          urlSecurityCheck(gURLBar.value,                           gBrowser.contentPrincipal,                           nsIScriptSecMan.DISALLOW_INHERIT_PRINCIPAL);          handleURLBarCommand();        } catch (ex) {}      }    },
meta: 10520	/local1/tlutelli/issta_data/temp/all_js/javascript/2007_temp/2007/10520/93094f132f00016a39740c927bcd7c9789931f64/browser.js/buggy/browser/base/content/browser.js