Old Snow tests show Snow vulnerability on Firefox

[weizman]

Lines 50 and 74 are old tests that do crazy stuff to bypass Snow using embed and object.

Now with #53, These tests show that on Firefox Snow fails to protect realms when those techniques are being used.
This is an active vulnerability in Snow-Firefox that needs to be addressed

[weizman]

Does this leave me extra vulnerable?

Not at all, this simply means Snow can be bypassed which is similar to not having Snow running in the first place, so you're not left more vulnerable than before, but just as much.

[weizman]

From f2258c7 these 2 tests are skipped, but still need to be solved!

[weizman]

objects and embed are now forbidden by CSP thanks to #118