Mozilla closes security hole in Firefox's new tab window