Firefox Community Forum

One of the add-in permissions is "Access your data for sites in the “named” domain". I looked at that and thought, "That certainly cannot include passwords"; BUT the explanation for this permission is: "The extension could read the content of web pages you visit in the specified domain, as well as data you enter into those web pages, such as usernames and passwords. "

I was stunned.

That means that addins that get this permission have access to my banking/medical/etc. usernames & passwords. This is not acceptable. Can a permission be developed that would be: "Access your data for sites in the “named” domain" (except usernames/passwords).

The permission "Access your data for all websites" is significantly worse in that it applies to all sites.

Firefox periodically says I am "forbidden" to enter my Kaiser website (KP.org). I know what Mozilla recommends as a fix, which is to clear data and cookies. But this creates more problems because I have to re-enter passwords and other settings. This is a problem Mozilla's website reports has been occurring for YEARS! Why can't Mozilla/Firefox fix this? Please tell me there is a better way to fix this problem.

David Karp dkarpcal@gmail.com or cloverdavid@gmail.com

i need set a default exception website for pop-up blocker settings fore every firefox install. or completely disable pop-up blocker settings as default.

what can i do for this purpose?

hello, I've been trying to follow Firefox's official guide in the docs and ready 3rd party articles in order to enable payment method auto-fill in Firefox. however, this section seems to be missing from my settings page.

under Privacy and Security, I cannot find anything to do with saved payment methods or the checkbox to enable payment method auto-fill.

how can I resolve it?

I just learnt that the mozilla firefox terms of service have been either updated, or previously included, a clause of sorts that states that any content uploaded to mozzilla is automatically given a royalty free worldwide license to mozilla itself. Does this apply to content such as add-ons only or does it apply to things uploaded to other websites(such as social media, forums, etc)

I have included a website on the list of exceptions for deleting cookies when Firefox is closed. When I go to the website the icons on Firefox for it show "enhanced tracking protection off" and "You have granted this website additional permissions". This website uses cookies to recognize my computer and not to require a one time password. However, when I close Firefox despite the fact that the website is on the exception list, cookies are deleted and I have to keep re-entering the one time password. I did turn of the checkbox for deleting cookies when Firefox is closed and now I am no longer asked to enter the OTP after Firefox is closed.

I assume this is a bug. Does anyone else experience similar issues? Is anything I can do about it and be able to use the exception list as intended?

Thanks.

I had to reset my primary password. Now the new password is not being accepted. And I keep getting a pop-up asking for the password. What can I do to have my password accepted?

I already tried to un-check "use primary password" in settings but cannot accomplish that with a password that is rejected.

Why does Mozilla's new CEO feel the need to bloat and mine data in the browser I downloaded to escape that in other browsers? Can I not escape AI in one place? I come to Mozilla Firefox for one reason and one reason alone and y'all suddenly seem very keen on getting rid of this reason.

I have accounts that will not work because they cannot access my location, My computer says all access is allowed, so is there something in Firefox that blocks my location?

I'm encountering some difficulties with my current account, which is locked out. I would like to request assistance from the support team to help me delete my account and remove my personal information from the platform. However, I'm having trouble finding the contact information for the support team. I couldn't locate their email address or phone number, and I'm hesitant to post my personal email address and information on a public forum.

I'm feeling quite frustrated, as I've never encountered such challenges with an app before. It appears that I'm unable to reach the Firefox support team at the moment. Can someone please provide guidance on how I can securely and privately request their assistance in deleting my account and personal information?

I had to create a new account just to post this question because my original account got locked out. This happened because I recently acquired a new phone and didn't transfer the two-step authentication information to my new device.

Hi I am a long time user of firefox because i love its customization and tools available to help me with my work and personal life. Recently i have been ordered to remove Firefox from the company laptop as it was deemed insecure by the IT and security department. I have been told to use MS edge and Google's Chrome. Their reasoning is "An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability affects Firefox < 136 and Firefox ESR < 128.8." I do not know what this means. Is there something i can tell my IT department to argue against the directive to only use either Edge or Chrome. Best regards, F Silva

TL;DR : Disqus comments used to work while using privacy Strict mode now it doesn't.

After years of it working out of the get-go while using Strict mode up till recently (about a year ago this was really low on my priority list) refused to work I though it was my Ad blocker was causing issues but after setting it in the filters to allow and even after turning it off still no dice.

Removed all add-ons tried again still Disqus comment section refused to load in the websites I regularly visit. So after giving up, I just look around in the browser setting to see if there is anything that may cause conflict with certain scripts from running.

I don't want to use passkeys, and it seems that every site is checking browser support and wasting my time with passkey prompts before allowing me to log in with a password. How do I disable passkey support in Firefox?

Firefox provides the option to Remember search and form history under custom settings. I want the browser to remember search history but not remember form history. Is there a way to separate these two settings?

Below is the content-security-policy Firefox loads for chatGPT:

default-src 'self'; script-src 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'wasm-unsafe-eval' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; script-src-elem 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'sha256-RvbVrdDS11FSnQaULCOgXPA5u0nMP2Im1d2pGiRBGC4=' 'sha256-eMuh8xiwcX72rRYNAGENurQBAcH7kLlAUQcoOri3BIo=' auth0.openai.com challenges.cloudflare.com chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://apis.google.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://docs.google.com https://jidori.g1.internal.services.openai.org https://js.live.net/v7.2/OneDrive.js https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www-onepick-opensocial.googleusercontent.com wss://*.chatgpt.com wss://*.chatgpt.com/; img-src * 'self' blob: data: https: https://docs.google.com https://drive-thirdparty.googleusercontent.com https://ssl.gstatic.com; style-src 'self' 'unsafe-inline' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; font-src 'self' data: https://*.oaistatic.com https://fonts.gstatic.com; connect-src 'self' *.oaiusercontent.com api-iam.intercom.io api-js.mixpanel.com browser-intake-datadoghq.com chatgpt.com/ces fileserviceuploadsperm.blob.core.windows.net http://0.0.0.0:* http://localhost:* https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.onedrive.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://content.googleapis.com https://docs.google.com https://events.statsigapi.net https://featuregates.org https://graph.microsoft.com https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www.googleapis.com o33249.ingest.sentry.io statsigapi.net wss://*.chatgpt.com wss://*.chatgpt.com/ wss://*.intercom.io wss://*.webpubsub.azure.com; frame-src challenges.cloudflare.com https://*.sharepoint.com https://content.googleapis.com https://docs.google.com https://onedrive.live.com https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ js.stripe.com; worker-src 'self' blob:; media-src blob: 'self' *.oaiusercontent.com fileserviceuploadsperm.blob.core.windows.net https://cdn.openai.com https://persistent.oaistatic.com; frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj; report-to chatgpt-csp-new; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub1f79f8ac903a5872ae5f53026d20a77c&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=version%3Achatgpt-csp-new

Notice that it includes " frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj"

Would this extension be installed in the computer, kind of like the extensions that are loaded from Chrome (i.e., C:\Users\myUser\AppData\Local\Google\Chrome\User Data\extensions_crx_cache)?

Thanx

When using Firefox (latest) and attempting to login into a website I get an error (see attached image) generated by the host's server's firewall. It appears it thinks I'm a bot. When I use Firefox's privacy mode I don't get this error. I would prefer not to use privacy mode. I contacted the administrator of the website I'm attempting to access and he couldn't offer any help.

When I use Google Chrome browser I don't encounter the above problem. This leads me to believe it's not an issue with my Avast Anti-Tracking and Antivirus settings.

Any help would be appreciated.

Chrys

I signed up & paid for Mozilla Monitoring Premium. I get monthly reports from then, but when I click on "automatically delete data from brokers," I'm asked to sign up for Premium again. Please help.