diff --git a/caps/nsScriptSecurityManager.cpp b/caps/nsScriptSecurityManager.cpp
index 9dcbb2b75..113cc752a 100644
--- a/caps/nsScriptSecurityManager.cpp
+++ b/caps/nsScriptSecurityManager.cpp
@@ -1149,6 +1149,9 @@ nsScriptSecurityManager::CheckLoadURIWithPrincipal(nsIPrincipal* aPrincipal,
 
                 BLOK("rps-uk.rockpapershotgun.com") || // XXX?
 
+                BLOK("buy.tinypass.com") ||
+                BLOK("cdn.tinypass.com") ||
+
                     0) {
 #undef BLOK
                 // Yup.