Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113.