rv = securityManager->CheckLoadURI(mDocumentBaseURL, baseHrefURI, PR_FALSE);
rv = securityManager->CheckLoadURI(mDocumentBaseURL, baseHrefURI, nsIScriptSecurityManager::STANDARD);
HTMLContentSink::ProcessBaseHref(const nsString& aBaseHref){  //-- Make sure this page is allowed to load this URL  nsresult rv;  NS_WITH_SERVICE(nsIScriptSecurityManager, securityManager,                   NS_SCRIPTSECURITYMANAGER_CONTRACTID, &rv);  if (NS_FAILED(rv)) return;  nsCOMPtr<nsIURI> baseHrefURI;  rv = NS_NewURI(getter_AddRefs(baseHrefURI), aBaseHref, nsnull);  if (NS_FAILED(rv)) return;  rv = securityManager->CheckLoadURI(mDocumentBaseURL, baseHrefURI, PR_FALSE);  if (NS_FAILED(rv)) return;  if (nsnull == mBody) {  // still in real HEAD    mHTMLDocument->SetBaseURL(aBaseHref);    NS_RELEASE(mDocumentBaseURL);    mDocument->GetBaseURL(mDocumentBaseURL);  }  else {  // NAV compatibility quirk    mBaseHREF = aBaseHref;  }}