insecure Firefox OS packaged app