When trying to use the following script I get a Security error... WDZ any idea why?

js code:

---

// ==UserScript==
// @name           MsgHelp.net - inline.editing
// @namespace      http://*msghelp.net/*
// @include        http://*msghelp.net/*
// ==/UserScript==

    var url = 'http://shoutbox.menthix.net/editpost.php';
    var pid;
    var postkey;
    var subject;
   
    if ( typeof unsafeWindow !== 'object' ) {
        unsafeWindow = window;
    }
   
    var iEdit = document.createElement ( 'img' );
    iEdit.setAttribute ( 'src' , 'data:image/gif;base64,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' );
   
    var iLoading = unsafeWindow.document.createElement ( 'img' );
    iLoading.setAttribute ( 'src' , 'data:image/gif;base64,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' );
    iLoading.setAttribute ( 'style', 'display: block; margin: 0 auto; padding: 1em 0' );
    var oDivLoading = document.createElement ( 'div' );
    oDivLoading.setAttribute ( 'style' , 'margin: 10px auto;' );
    var paragraph = document.createElement ( 'p' );
    paragraph.style.textAlign = "center";
    paragraph.appendChild( iLoading );
    paragraph.appendChild( document.createTextNode( 'Loading inline editor...' ) );
    oDivLoading.appendChild( paragraph );

    var x = document.getElementsByTagName("A");
    var elem, match;
    for ( var i in x ) {
        var h = x[i].href;
        // Look for an anchor that links to editpost.php
        if ( match = h.match(/editpost\.php\?pid=([0-9]+)$/) ) {
            pid = match[1];
            elem = x[i];
           
            // Add an inline edit button
            var button = iEdit.cloneNode( false );
            button.addEventListener( 'click' , createListener( pid ), false );
            elem.parentNode.insertBefore ( button , elem );
        }
    }
   
    // Creates an event listener for the inline edit button
    function createListener( pid ) {
        var args = arguments;
        return function() {
            // Call inlineEditor(pid) when clicked
            unsafeWindow.inlineEditor.apply(null, args);
        };
    }
   
    function createInlineEditor(pid) {
        // Prepare some DIVs to hold the inline editor
        var tDiv = getId ( 'pid_'+pid );
        var oDiv = oDivLoading.cloneNode( true );
        oDiv.setAttribute( 'id', 'pid_inline_'+pid);
        tDiv.parentNode.insertBefore ( oDiv, tDiv );
        tDiv.style.display = 'none';

        //Start an XML HTTP Request for editpost.php
        var xmlhttp = new XMLHttpRequest();
        xmlhttp.open('GET', url+'?pid='+pid, true);
        xmlhttp.onreadystatechange = function () {
            if ( xmlhttp.readyState !== 4 ) return;
            // Get the post_key and subject values
            var match = xmlhttp.responseText.match(/name="post_key" value="([a-f0-9]+)"/);
            if(match) {
                postkey = match[1]; // All OK
            }

            match = xmlhttp.responseText.match(/name="subject" (.*) value="?(.*)"/);
            if(match) {
                subject = match[2].split('"')[0]; // All OK
            }
            if ( postkey !== 'undefined' && subject !== 'undefined' ) {
            // Set the editor content
                oDiv.innerHTML = '<form action="editpost.php" method="POST" enctype="multipart/form-data" name="input">'+
                    '<input type="hidden" name="subject" size="50" maxlength="85" value="'+subject+'" tabindex="1" />'+
                    '<input type="hidden" name="action" value="do_editpost" />'+
                    '<input type="hidden" name="pid" value="'+pid+'" />'+
                    '<input type="hidden" name="post_key" value="'+postkey+'" />'+
                    '<input type="hidden" name="postoptions[isset]" value="1" />'+
                    '<textarea name="message" rows="10" cols="100" wrap="virtual" tabindex="3">'+getId ('qqmsg'+pid).value+'</textarea>'+
                    '<br /><br /><input type="submit" value="Update Post" />'+
                    '<input type="button" value="Cancel Update" onClick="javascript:inlineEditor('+pid+');" /></form>';
            }
            else inlineEditor ( pid );
        }
        xmlhttp.send( null );
    }

    unsafeWindow.inlineEditor = function ( pid ) {
        // Create an inline editor if not available yet
        var obj = getId ( 'pid_inline_'+pid );
        if (obj === null) return createInlineEditor( pid );

        // Swap the editor style between visible and hidden
        if ( obj.style.display === 'none' ) { obj.style.display = ''; }
        else { obj.style.display = 'none'; }

        // Swap the post body style between visible and hidden
        obj = getId ( 'pid_'+pid );
        if ( obj.style.display === '' ) { obj.style.display = 'none'; }
        else { obj.style.display = ''; }
    }
   
    function getId ( id ) { return document.getElementById ( id ); }

---

I don't feel like debugging it at the moment, but this version works fine AFAIK.

quote:

---

Originally posted by WDZ
I don't feel like debugging it at the moment, but this version works fine AFAIK.

---

quote:

---

Originally posted by matty
When trying to use the following script I get a Security error... WDZ any idea why?

---