[Bug 1295436] CVE-2015-8508 bugzilla: cross-site scripting when generating a dependency graph