> Comment from Boris from Bug 1308889 Now that I write this down... is it not the case that LoadURI is the _only_ place that passes INTERNAL_LOAD_FLAGS_INHERIT_PRINCIPAL? Can we push that entire computation that's conditioned on that flag out of InternalLoad to LoadURI, and just have InternalLoad have simple semantics: If aPrincipalToInherit is non-null and the URL wants to inherit a principal, it will inherit it; if either of those is not the case, there will be no inheritance. Then we can kill INTERNAL_LOAD_FLAGS_INHERIT_PRINCIPAL altogether. Followup probably OK for this change, if we want to reduce risk.