Comment 3 for bug 1245350

Sounds like this is a rather significant vulnerability that should be fixed in private and trigger an embargoed advisory. Feel free to disagree with me though :)