Any piece of javascript code on any website you visit is going to be running inside of Firefox on your local network.

I don't know how widespread these kinds of attacks are but they are reasonably well known which is why these port blacklists were implemented in the first place:

https://www-archive.mozilla.org/projects/netlib/portbanning.