rem:  var anchorNodes = msgDocument.getElementsByTagName("a"); for (var index = 0; index < anchorNodes.length && !isEmailScam; index++) isEmailScam = isPhishingURL(anchorNodes[index], true); 
add:  var linkNodes = msgDocument.links; for (index = 0; index < linkNodes.length && !isEmailScam; index++) isEmailScam = isPhishingURL(linkNodes[index], true); 
context: function isMsgEmailScam(aUrl){  var isEmailScam = false;   if (!aUrl || !gPrefBranch.getBoolPref("mail.phishing.detection.enabled"))    return isEmailScam;  // Ignore nntp and RSS messages  var folder = aUrl.folder;  if (folder.server.type == 'nntp' || folder.server.type == 'rss')    return isEmailScam;  // loop through all of the link nodes in the message's DOM, looking for phishing URLs...  var msgDocument = document.getElementById('messagepane').contentDocument;  // examine all anchor tags...  var anchorNodes = msgDocument.getElementsByTagName("a");  for (var index = 0; index < anchorNodes.length && !isEmailScam; index++)    isEmailScam = isPhishingURL(anchorNodes[index], true);  // if an e-mail contains a non-addressbook form element, then assume the message is  // a phishing attack. Legitimate sites should not be using forms inside of e-mail  if (!isEmailScam)  {    var forms = msgDocument.getElementsByTagName("form");    for (var i = 0; i < forms.length && !isEmailScam; i++)      isEmailScam = forms[i].action.search("addbook") != 0;  }  // we'll add more checks here as our detector matures....  return isEmailScam;}
meta: 5872	/local1/tlutelli/issta_data/temp/all_js/javascript/2006_temp/2006/5872/c017ee0cb76019bd6a5e8092eda6b33a20a088ab/phishingDetector.js/buggy/mailnews/base/resources/content/phishingDetector.js