Comment 3 for bug 2021966

Thanks Dan. I've switched the bug report to public and set the security advisory task to "won't fix" (indicating there are no plans to issue a security advisory covering this topic).

I'll also set it as a duplicate of bug 1700501, but if anyone disagrees then it's easy to split back out.