Same-Origin Policy Bypass

firefox is vulnerable to same-origin policy bypass. An attacker who successfully installs a malicious extension on a user's browser is able to perform credential-less same origin policy violations...