One of the best ways to get issues like this in front of people is through Mozilla's dev-security-policy list (which was originally the mozilla.dev.security.pol

One of the best ways to get issues like this in front of people is through Mozilla's dev-security-policy list (which was originally the mozilla.dev.security.policy Usenet group). People from other browser manufacturers monitor that list. The list archives are at https://groups.google.com/a/mozilla.org/g/dev-security-policy https://groups.google.com/a/mozilla.org/g/dev-security-polic...; this issue is covered at https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/yqALPG5PC4s https://groups.google.com/a/mozilla.org/g/dev-security-polic...