Mozilla Core Services disclosed a bug submitted by mikey96: https://hackerone.com/reports/2140976 [Source]