Mozilla Core Services disclosed a bug submitted by aliend89: https://hackerone.com/reports/2078707 [Source]