Mozilla Core Services disclosed a bug submitted by mikey96: https://hackerone.com/reports/2171494 [Source]