Firefox prevent code injection attack