Directory Traversal / Local File Inclusion on addons.mozilla.org

This was my most recent report as part of the Mozilla Web Security Bug Bounty (http://www.mozilla.org/security/bug-bounty-faq-webapp.html). It also happens to be the first one that was marked public, so I decided to publish my writeup.