Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151.