https://allelesecurity.com/asa-2019-00432/
ASA-2019-00432 - Mozilla Firefox and Thunderbird: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects