https://bugzilla.redhat.com/show_bug.cgi?id=2082387
--- Comment #3 from Dmitry Butskoy dmitry@butskoy.name --- Looking at the header of https://hg.mozilla.org/releases/mozilla-release/file/tip/services/common/haw..., it seems some another hawk implementation, just mentioning an ancient "https://github.com/hueniverse/hawk" link, and does not have any regexp code for the host parsing.
IOW, it seems that even the current upstream Firefox still uses its own hawk implementation, which yet not affected by the issue, since does not use any regexp for host parsing yet.
epel-packagers-sig@lists.fedoraproject.org