diff --git a/WebKit/qt/Api/qwebsettings.cpp b/WebKit/qt/Api/qwebsettings.cpp
index 56ac170..1c83a4d 100644
--- a/WebKit/qt/Api/qwebsettings.cpp
+++ b/WebKit/qt/Api/qwebsettings.cpp
@@ -361,7 +361,7 @@ QWebSettings::QWebSettings()
     d->attributes.insert(QWebSettings::OfflineStorageDatabaseEnabled, true);
     d->attributes.insert(QWebSettings::OfflineWebApplicationCacheEnabled, true);
     d->attributes.insert(QWebSettings::LocalStorageEnabled, false);
-    d->attributes.insert(QWebSettings::LocalContentCanAccessRemoteUrls, true);
+    d->attributes.insert(QWebSettings::LocalContentCanAccessRemoteUrls, false);
     d->offlineStorageDefaultQuota = 5 * 1024 * 1024;
 }
 
diff --git a/WebKit/qt/ChangeLog b/WebKit/qt/ChangeLog
index 826dc43..5d1d262 100644
--- a/WebKit/qt/ChangeLog
+++ b/WebKit/qt/ChangeLog
@@ -1,3 +1,15 @@
+2009-09-03  Richard Moore  <rich@kde.org>
+
+        Reviewed by NOBODY (OOPS!).
+
+        Change the default of LocalContentCanAccessRemoteUrls from true to
+	false for security reasons. See the discussion on
+	https://lists.webkit.org/pipermail/webkit-dev/2009-August/009557.html
+	for details. No auto-test as there is no functional change to test.
+
+        * Api/qwebsettings.cpp:
+        (QWebSettings::QWebSettings):
+
 2009-08-28  Richard Moore  <rich@kde.org>
 
         Reviewed by NOBODY (OOPS!).