Data sent with in multipart channels such as the multipart/x-mixed-replace MIME type will ignore the referrer-policy response header leading to potential information disclosure for sites using this header. This vulnerability affects Firefox < 51.