EIP-2026-117635

The exploit describes a content-type confusion vulnerability in Mozilla Firefox <= 88.0.1, where a server can mislead Firefox into executing arbitrary code by serving a file with a mismatched Content-Type and file extension. The provided Python script simulates a malicious server that serves a fake JPEG file containing JavaScript code, which executes when opened by the user.