This was fixed in June. The new bypass was found a day before the article was published. The journalist literally gave Mozilla one day to fix.