As you might guess, a policy decision with that title was made at a late night pajama party, hosted at last week's Black Hat conference in Las Vegas.
It was made by company's director of ecosystem development, Mike Schaver to security researcher Robert Hansen who doubted that this was possible.
However Shaver wrote it out on the back of a business card with an arrow linking to his mobile phone number.
Hansen said that Shaver was not legless at the time and did not flinch when Hansen told him he would scan and post the card as proof.
However it seems that Mozilla security chief Window Snyder was not impressed with the public claims of Shaver when he came back to the office. She 'explained' to Infoworld that Shaver was trying to say how responsive the Mozilla team is to bug reports and not offering a statement of formal policy.
More here. µ