Comment 4 for bug 1466633

Also, I question the security relevancy of this report. It requires quite a few actions from the user and I doubt an attacker could pull such an attack off. I'd suggest taking this issue to the upstream project but feel like it has negligible security impact.