Arbitrary code execution through unsanitized browser UI — Mozilla

Mozilla developer Johann Hofmann reported that unsanitized output in the browser UI can lead to arbitrary code execution...