Sudhakar Chandra wrote: > One more option would be to use JSUtils' FileUtils and do a > chromeToPath() on the chrome URL and open up a file:/// url. Interesting. > Would that be an issue? It would be better, but still not safe. file: URLs are allowed to at least read-access local files, which is bad enough.