To clarify - there is currently no known way to exploit this, the security issue is how we fix bug #1300734 without opening a security hole ref point (3) above.
So it could be argued that this is not a vulnerability as such, due to the fact that the current implementation doesn't work.
If folks would prefer we can open this to public security, I just wanted to get some initial feedback as a precaution rather than assuming it should be public.
To clarify - there is currently no known way to exploit this, the security issue is how we fix bug #1300734 without opening a security hole ref point (3) above.
So it could be argued that this is not a vulnerability as such, due to the fact that the current implementation doesn't work.
If folks would prefer we can open this to public security, I just wanted to get some initial feedback as a precaution rather than assuming it should be public.