Bug 451958. Add more CheckLoadURIs (part 2). r+sr=roc

--HG--
extra : rebase_source : 09323fc6904d59a7b747187293c5850351401580

content/media/video/src/nsMediaStream.cpp

@@ -124,6 +124,14 @@ nsresult nsDefaultStreamStrategy::Open(nsIStreamListener** aStreamListener)
                                               &rv);
       NS_ENSURE_TRUE(listener, NS_ERROR_OUT_OF_MEMORY);
       NS_ENSURE_SUCCESS(rv, rv);
+    } else {
+      // Ensure that we never load a local file from some page on a 
+      // web server.
+      rv = nsContentUtils::GetSecurityManager()->
+             CheckLoadURIWithPrincipal(element->NodePrincipal(),
+                                       mURI,
+                                       nsIScriptSecurityManager::STANDARD);
+      NS_ENSURE_SUCCESS(rv, rv);
     }
     rv = mChannel->AsyncOpen(listener, nsnull);
     NS_ENSURE_SUCCESS(rv, rv);