From dafdf0b1eb6222f44972de23cf717ffe74838a98 Mon Sep 17 00:00:00 2001
From: "pkasting%google.com" <pkasting%google.com>
Date: Fri, 18 Aug 2006 21:35:16 +0000
Subject: [PATCH] Bug 337223: Don't expose moz-anno protocol to web pages.
 Patch by brettw r=jst sr=bzbarsky

---
 caps/src/nsScriptSecurityManager.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/caps/src/nsScriptSecurityManager.cpp b/caps/src/nsScriptSecurityManager.cpp
index 3846f377ae31..75af01ad285d 100644
--- a/caps/src/nsScriptSecurityManager.cpp
+++ b/caps/src/nsScriptSecurityManager.cpp
@@ -1281,7 +1281,7 @@ nsScriptSecurityManager::CheckLoadURIWithPrincipal(nsIPrincipal* aPrincipal,
         { "chrome",          ChromeProtocol },
         { "file",            PrefControlled },
         { "https",           AllowProtocol  },
-        { "moz-anno",        ChromeProtocol },
+        { "moz-anno",        DenyProtocol   },
         { "mailbox",         DenyProtocol   },
         { "pop",             AllowProtocol  },
         { "imap",            DenyProtocol   },