Detect the Same-Origin Redirection with a Bug in Firefox's CSP Implementation