The cause for this is the same as https://bugzilla.mozilla.org/show_bug.cgi?id=1850158, although symptoms are a bit different. The deep links are using a different code path than if you write down a URL in the URL bar specifically. This code path needs to be protected as well.
Bug 1868005 Comment 3 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
The cause for this is the same as [1850158](https://bugzilla.mozilla.org/show_bug.cgi?id=1850158), although symptoms are a bit different. The deep links are using a different code path than if you write down a URL in the URL bar specifically. This code path needs to be protected as well.