Φόρουμ κοινότητας «Firefox»

Hi, During some tests I found that FF 115.19.0esr can still execute arbitrary JS similarly to CVE-2024-4367. I’ve checked the versions and > 115.11esr should be patched. Any payload with ‘/JS’ taken from https://github.com/luigigubello/PayloadsAllThePDFs/tree/main will do. Since this is probably important – FontMatrix is *not* working (no JS), original PoC (https://codeanlabs.com/wp-content/uploads/2024/05/poc_generalized_CVE-2024-4367.pdf) is also *not* working. I also wasn’t able to call an external script and so far haven’t found any path to exploit it beyond an alertbox. However, it still bothers me a lot and I’d like to know whether it’s the correct, expected behavior with FF+pdf.js, is it a vulnerability, or maybe my browser was somehow corrupted or is using some other mechanism that’s not within your control (my settings? about:config?).

Steps to re-create: 1. Open file in notepad 2. Add ‘/OpenAction 99 0 R’ after ‘lang’ in ‘1 0 obj section’ 3. After ‘endobj’ add ‘99 0 obj <</Type /Action /S /JavaScript /JS (app.alert\(1\);)>>’ 4. Result – alertbox popping twice

When I send an email using Gmail, Firefox stores a copy in "Sent Mail", another copy in "Sent", and another copy in "All mail" . Why is this and how can I stop this? Or how can I delete two of the duplicated storage locations? Thank you

Hello, I use my providers web email promail.ptd.net , but they don't have where I can add a sound to incoming email or specific ones.. I did add the promail to your notifications,settings, but can you explain to me what the step would be to get their incoming email to make a sound of choice while using Firefox? or do i have to switch to an email program that already has that option? I wish Eudora would continue!

How do i stop having to type in 6 letters when signing in now. This is new and I'd like to stop it for EVERY time I open Firefox. Once a week would be fine! Thanks

Hello: FF 140.b9 64b w11p. Are there ANY search engines (not nec browsers, just want to do a search in the address bar or search field) that do NOT go to an AI site to search? I want to minimize my use of AI technology, which uses extremely environmentally costly data farms. Thank you.

I'd like to take a full-page screenshot of my content within my Canvas/Instructure online class, but it only captures what's visible. I've tried opening the frame in its own tab, but it doesn't help.

When I use my phone to capture the entire page, it can work, but it's so narrow! Plus I have to continuously tap the "Scroll Down" button for the capturing process to capture more and more.

Can anyone please help? Thanks.

Is there a way to adjust the timing of notification banners being display in the lower right of my screen... I notice that notification for "X (Twitter)" only last a few seconds, which is fine... but YouTube notifications will not disappear unless I select "Dismiss". I looked at Notification setting but don't see anything that seems to address that. Thank You

An errant setting on my backup program wrecked havoc on my FF profile. I have a backup from two weeks ago which I can go back to, but I'm trying to figure out how to get my browsing history from the past two weeks over to the restored profile.

Some options I thought about: and for clarity, the newer but bad profile is still loadable, I've mainly lost all my extension settings and stored data

• Is there any tool that would sync the entries from the newer/bad profile to the older/good profile?
• If I restore the older/good profile, would FF Sync just add back in the newer entries -- which presumably it has saved in it's system over the past two weeks?
• I believe the places.sqlite" file from the newer/bad profile is still intact. Should I just copy that to the older/bad profile?