fixes bug 250900 "nsIBrowserHistory corrupts URI strings [was: crash when a long malformed URL is entered in the Location Bar [@js_CloneFunctionObject]]" r=biesi sr=neil

suite/browser/sessionHistoryUI.js

@@ -223,7 +223,7 @@ function addToUrlbarHistory()
     var url = getShortcutOrURI(urlToAdd);
     var fixedUpURI = gURIFixup.createFixupURI(url, 0);
     if (!fixedUpURI.schemeIs("data"))
-      gGlobalHistory.markPageAsTyped(fixedUpURI.spec);
+      gGlobalHistory.markPageAsTyped(fixedUpURI);
   }
   catch(ex) {
   }