How a single typo led to RCE in Firefox