Post #290783

@Microplastics101 we don't audit the full codebase / (or rather: changes to the upstream codebase) on each release, as that would be more or less an impossible task. We still work on the assumption that upstream (Mozilla) code is, in general, benign, and not trying to hide exploits/backdoors/whatever, and that the things that _might_ slip through (like this) are not good, but not something opening up serious attack vectors, for example.