Undetectable remote arbitrary code execution through JavaScript and HTTP headersbugzilla.mozilla.org3 pointszeveb8 years ago