We're not sure this could be exploited by web content (comment 9) but we're still glad to have it fixed so we don't have to worry about it.
Bug 1929623 Comment 17 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
We think it's unlikely to be exploitable by web content (comment 9) but we're still glad to have it fixed so we don't have to worry about it.