parseInt injected port to reassure AMO reviewers it isn't security hole

This fixes #524.