Mozilla Critical Services disclosed a bug submitted by yakirka: https://hackerone.com/reports/2030076 [Source]