Security and privacy WebExtensions can silently debilitate each other without the user knowing under Firefox due to 2 year-old CSP header modification bug: raising awareness and pushing to fix