Comment 3 for bug 1224014

If this is havana-only, we should just open the bug and get it quickly fixed there (before release). We don't do OSSAs for vulnerabilities in the release-being-developed as long as the issue is fixed before final release, and this one would be questionable anyway (it's more like a bug with corner-case security consequences).

Let me know what you think of the idea of opening it.