I'm going to mark this as csectype-priv-escalation, because self-hosted code is kind like like privileged code, and the exploit is tricking it into doing something unintended.
Bug 1770048 Comment 7 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
I'm going to mark this as csectype-priv-escalation, because self-hosted code is kind of like privileged code, and the exploit is tricking it into doing something unintended.