“Remote Arbitrary Code Execution” Through JavaScript
bugzilla.mozilla.org