Comment 8 for bug 1227575

I'm not sure about opening this to the public just to rush a fix. That seems like bad security practice.

I also think we need to wait for a patch to get worked out before we speculate on whether this could be backported. It seems doable to me. If we're worried about the change in behavior, it can be off by default in the backport.