Showing questions tagged: Show all questions

Firefox crash with message "Gah. Your tab just crashed"

We recently update Firefox with version 138.0 and now getting the message "Gah. Your tab just crashed" when opening the browser. We attempted to update and install vers… (read more)

We recently update Firefox with version 138.0 and now getting the message "Gah. Your tab just crashed" when opening the browser.

We attempted to update and install version 138.0.1 only resulting with the same error. We also found and attempted the following all resulting with the same error: - change the about:config page for settings to false for both browser.tabs.remote.autostart and browser.tabs.remote.autostart.2

- clear browser cache.

- enable Temporary Mode in the Help menu. This appears to fix the problem but only for the current browser session. When a new Firefox window is opened, the error reappears.

What is needed to resolve this error or is there a way to permanently enable Temporary Mode or some similar setting? Thanks for all your help with this.

Asked by marcelo.alejandro 1 month ago

Last reply by Mike Kaply 1 month ago

[docker/playwright] policies.json file not applied

Hey everyone. I am automating end-to-end testing with playwright for python, using the official Docker image from the microsoft artifact repository (using `playwright/pyt… (read more)

Hey everyone. I am automating end-to-end testing with playwright for python, using the official Docker image from the microsoft artifact repository (using `playwright/python:v1.49.1`).

As I have signed certificates for my local domains with my own certificate authority, I am trying to have Firefox automatically install the certificates via a policies file. However, Firefox seems to ignore the policies file no matter what.

To ensure that the file itself is used, I simplified it to a single boolean value, and ensured that it's copied correctly inside the container via the `cat` command. Here are the current contents:

{

 "policies": {
   "DisableTelemetry": true

}

I know that the CA certificate is installed correctly, as it works out of the box using the WebKit browser and Curl command. I have gotten it to work in Chromium by installing it to nssdb using `certutil`.

I have converted the file from ASCII to the `utf-8` charset.

The file has the expected content, and I have copied it to both `/etc/firefox/policies/policies.json` and `/ms-playwright/firefox-1466/firefox/distribution/policies.json` (the path to the binary is `/ms-playwright/firefox-1466/firefox/firefox`).

Opening `about:policies` shows the text "The Enterprise Policies service is inactive.", which is sadly not very informative. It would be nice to have a list of locations it looks in, and any problems it encountered.

The container uses Firefox Nightly 132.

Are these locations incorrect? Is there any way to debug this? Does anyone have any other suggestions? If you need any more info (Dockerfile, etc.), please let me know.

Thanks in advance.

Asked by Pat B 4 months ago

Last reply by Mike Kaply 4 months ago

Can't remove Purview Firefox browser extension with intune

Hello, New subscriber here. I have been given the task to test the install and uninstall of the Purview Firefox browser extension using Intune. I created 2 groups in E… (read more)

Hello,

New subscriber here. I have been given the task to test the install and uninstall of the Purview Firefox browser extension using Intune. I created 2 groups in EntraID, one for each (install and uninstall).

I have no issues with the installation. Initially, I left the test device in the install group and then added it to the uninstall group to remove it. (this usually works with other apps, it worked this way with the Purview Chrome browsing extension as well other apps) but when I do this, nothing happens.

Next, I removed the device from the install group and added it to the uninstall group only. Once the configuration profile applies to the test device, it allows the user to remove it manually (before it did not) but the extension remains installed.

I have created a policy using the administrative template extension uninstall option as well as with the OMA-URI settings but the same happens. When i check the device configuration for the device in Intune, it says it succeeded but that is not the case. The OMA-URI setting I was not too sure about, but gave it a shot. I used the UUID value for the Purview Firefox extension

I am attaching some pictures and hope someone can tell me what I am doing wrong. I can add additional information, if needed. I have opened a ticket with Microsoft last week but have not called me yet. I ran into this forum today.

Thanks in advance

Asked by raul.aramburu 4 months ago

Last reply by Mike Kaply 4 months ago

Mozilla inbuilt login authentication prompts Issue - buggy login user experience

We are currently considering using Firefox ESR as our default browser but experiencing a few issues and one of them is with our configured SailPoint IdentityIQ Single Sig… (read more)

We are currently considering using Firefox ESR as our default browser but experiencing a few issues and one of them is with our configured SailPoint IdentityIQ Single Sign-On Experience, which uses Basic Authentication.

Issue Description First, the login button needs to be clicked multiple times before access to the site is granted. Once signed in, the Firefox inbuilt authentication dialogue appears, prompting the user to log in again (see the attached screenshot). The landing page is only presented after clicking the login button several times. This creates a poor user experience, sometimes causing pages to load improperly. Interestingly, the same process works seamlessly in Edge Chromium.

Troubleshooting Steps Taken I have already attempted the following: 1. Temporarily disabled all custom and security settings in mozilla.cfg and config.json. 2. Temporarily disabled Firefox Tracking Protection. 3. Allowed third-party cookies for the specific URL. 4. Upgraded Firefox Version to 128.7.0 5. Since our Firefox browser is significantly hardened, I have also enabled and reconfigured the following settings in mozilla.cfg to ensure Basic Authentication is allowed, functions properly, and suppresses Firefox’s authentication prompt, but without success:

network.http.phishy-userpass-length = 255 network.http.use-basic-auth network.automatic-ntlm-auth.allow-non-fqdn network.automatic-ntlm-auth.trusted-uris security.enterprise_roots.enabled security.enterprise_roots.enabled

Observations from SailPoint Team Our colleagues from SailPoint have tested the setup in their environment, and according to them, it works as expected. However, their browser is not hardened, and they have leveraged the SailPoint UI for authentication instead of the built-in Firefox authentication prompt.

Further Investigation • Is there a specific configuration required in the user profile settings? • Network trace analysis shows 404 errors on GET requests and the following error codes on POST requests: • 302 Redirect: Mozilla Documentation • 408 Request Timeout: Mozilla Documentation

Next Steps Is there a specific security setting that needs to be enabled or disabled? Are there any particular Firefox enterprise policies we should modify? I have also attached screenshots for reference. Let me know if you need specific logs or network traces for further troubleshooting.

Asked by john-fifi.zuh 4 months ago

Last reply by saqib abbas 3 months ago

Deploying FireFox MSI with GPO: uninstall fails

Hi. On an Active Directory, we deploy Firefox (normal or ESR). It's OK. When we deactivate the link of the GPO, it's supposed to uninstall. But it doesn't (even if we del… (read more)

Hi. On an Active Directory, we deploy Firefox (normal or ESR). It's OK. When we deactivate the link of the GPO, it's supposed to uninstall. But it doesn't (even if we delete the GPO, specifying to uninstall at once).

The gpresult command on each computer doesn't show the GPO anymore, but Firefox is still installed.

( FYI, we used to do that with FrontMotion Community Edition, and it was always working (instal and uninstal). We even just tried the "last" (but old) ESR edition present on the FrontMotion site (CEESR-102), and it works. But FM CE version has stopped being developped. )

So, any idea about why the official Mozilla Firefox version (normal or ESR) doesn't uninstall?

Thanks by advance.

Asked by fepubs 5 months ago

Last reply by xivlauncher 4 months ago

Group Policy - Preferences

Using group policy there is various settings required for our users. We have been using the preferences policy located at: Administrative Templates > Mozilla > Fire… (read more)

Using group policy there is various settings required for our users. We have been using the preferences policy located at: Administrative Templates > Mozilla > Firefox > Preferences

This policy requires the use of JSON, we have been using the following which has been working ok:

{ "media.navigator.permission.disabled": { "Value": true, "Status": "user" }, "browser.warnOnQuit": { "Value": true, "Status": "user" }, "keyword.enabled": { "Value": false, "Status": "user" }, "browser.tabs.unloadOnLowMemory": { "Value": false, "Status": "user" }, }

Within the old "Preferences (Deprecated)" there is a setting called "intl.accept_languages" which we are wanting to use but I can't seem to find a way to include this within the JSON. We are wanting to set it to "en-GB".

If I enable this within the old deprecated preferences section it causes the Preferences with the JSON to stop working.

I have tried various combinations of including it within the JSON but neither are working:

"intl.accept_languages": { "Value": en-GB, "Status": "user" }


"intl.accept.languages": { "Value": en-GB, "Status": "user" }

I've checked the Mozilla website here: https://mozilla.github.io/policy-templates/ There doesn't seem to be any reference for the intl.accept_languages setting to be used within the JSON

Please can someone advise?

Asked by NathanH 3 months ago

Last reply by Mike Kaply 3 months ago

Firefox ESR Not Displaying 'Refresh Firefox' Option in Help > More Troubleshooting Information

I'm using Firefox ESR 128.10.1esr on Kali, and I'm encountering an issue where the 'Refresh Firefox' option is missing from the ☰ → Help → Troubleshooting more Informatio… (read more)

I'm using Firefox ESR 128.10.1esr on Kali, and I'm encountering an issue where the 'Refresh Firefox' option is missing from the ☰ → Help → Troubleshooting more Information. This is preventing me from restoring Firefox to its default settings. I've already tried the following:

   Restarting Firefox
   Clearing the startup cache
   Confirmed there are no extensions installed

None of these steps have fixed the issue. I need a way to reset Firefox ESR to factory defaults, but I can't find an option to do so. Attached is a screenshot of the Troubleshooting Information page.

Any assistance would be greatly appreciated!

Asked by jadi zadi 3 weeks ago

Last reply by Mike Kaply 2 weeks ago

Intune Joined Devices on Firefox

Hello, Our organization is attempting to implement a Conditional Access policy that restricts access to certain websites to Intune joined devices only. The error message… (read more)

Hello,

Our organization is attempting to implement a Conditional Access policy that restricts access to certain websites to Intune joined devices only. The error message mentions that I need to enable a setting from within Firefox called Windows SSO, mentioned here: https://support.mozilla.org/en-US/kb/windows-sso. This setting is already enabled and I am still getting an error.

Is there anything else that could be causing this?

Asked by tallen3 1 month ago

Last reply by nullsbrawlone 1 month ago

call expression in firefox.cfg

Firefox is used on Windows 11 Enterprise. There is a firefox.cfg in the installation directory (and an autoconfig.js in the ./defaults/pref sub-directory). Everything wor… (read more)

Firefox is used on Windows 11 Enterprise. There is a firefox.cfg in the installation directory (and an autoconfig.js in the ./defaults/pref sub-directory). Everything works fine when a pref(...); entry is written to the firefox.cfg. However, we want the firefox.cfg to call the pref(...); entries from a global_config.js which is saved on the machines public directory.

Therefore, the firefox.cfg says:

// free line lockPref("autoadmin.global_config_url","file:///C:/Users/Public/.../global_config.js");

But firefox does not load whatever prefs are written to the global_config.js. There probably is problems with the formatting of the file path (file:///C:/Users/Public/.../global_config.js). What would the correct formatting look like? Unfortunately, Mozilla´s support guide only includes an example code for a firefox.cfg which calls a global_config.js via http:, but not via file:.

Asked by fortuna90 4 months ago

Last reply by Mike Kaply 4 months ago

Installing Firefox ESR in Enterprise Enviroments

Hello everyone, We have been using Mozilla Firefox ESR (32-bit) in the organization for several years. For installation on our clients, we use "Matrix42 Empirum" as the … (read more)

Hello everyone,

We have been using Mozilla Firefox ESR (32-bit) in the organization for several years. For installation on our clients, we use "Matrix42 Empirum" as the software distribution tool. All it does is install the MSI of Firefox.

However, for quite some time now (almost 2 years), we have been facing an issue where some installations are marked as successful (Error code 0), but once the MSI installer is automatically closed, files like "firefox.exe" disappear from the installation directory – despite the installation being marked as successful.

The problem doesn’t always occur, but a repair attempt usually resolves the issue.

In addition to Empirum, we also use Defender for Endpoint, but we couldn’t find any clues there.

Is this problem known, or are we the only ones experiencing it?

Asked by WilliCat 3 months ago

Last reply by Mike Kaply 2 months ago

differences and interchangibility of pref(); user_pref(); and lockPref();

Firefox is used on Windows 11 Enterprise. There is a firefox.cfg in the installation directory (and an autoconfig.js in the ./defaults/pref sub-directory). The firefox.cf… (read more)

Firefox is used on Windows 11 Enterprise. There is a firefox.cfg in the installation directory (and an autoconfig.js in the ./defaults/pref sub-directory). The firefox.cfg targets an autoconfigfile.js. This setup is recommended here: [firefox using autoconfig"]

  1. In the support article´s example, the firefox.cfg uses a pref(); expression. Is it possible to use a lockPref(); expression instead?
  2. What is the result of either using pref(); expressions or user_pref(); expressions in the remoted autoconfigfile.js? Are both of them possible, especially while the firefox.cfg uses lockPref(); expressions instead of pref();?

I hope that somesone can help with one of these questions. Thanks a lot!

Asked by fortuna90 4 months ago

Last reply by Mike Kaply 4 months ago

Regarding Group Policy for Mozilla Firefox Browser Restart Notifications

Dear Mozilla Firefox Team, I hope this message finds you well. We manage a network of workstations that frequently utilize the Mozilla Firefox browser. Recently, we hav… (read more)

Dear Mozilla Firefox Team,

I hope this message finds you well.

We manage a network of workstations that frequently utilize the Mozilla Firefox browser. Recently, we have encountered a situation where many of our systems are showing vulnerabilities due to pending browser updates. The updates are being installed successfully; however, users often neglect to restart the browser, which is crucial for completing the update process and ensuring security.

To address this, we would like to inquire if there is an existing Group Policy that can be configured to automatically notify users when they need to restart their Firefox browser to apply the latest updates. Such a feature would greatly assist us in maintaining the security integrity of our workstations and ensuring that users are made aware of the importance of restarting their browsers when prompted.

If this functionality is not currently available, we would appreciate any insights on potential workarounds or future plans to incorporate such a feature.

Thank you for your attention to this matter. We look forward to your response.

Asked by rupai.tarafder 3 months ago

Last reply by Mike Kaply 3 months ago

Forcing an addon (installed with policies.json) to work in private windows

I'm developing a parental control add-on, installed with policies.json. It works... but it's easy to disable it by simply deactivating it in private windows + opening a p… (read more)

I'm developing a parental control add-on, installed with policies.json. It works... but it's easy to disable it by simply deactivating it in private windows + opening a private window, which kinda makes it useless.

Is there a way to force my add-on to work in private windows, regardless of user choice?

If that's not possible, is it possible to somehow disable private windows while the add-on is disabled in private windows.

Note: I know that I can disable private browsing entirely with policies.json `privatebrowsingmodeavailability`, but I'd rather avoid it. Kids browing privately is a good idea :)

Asked by d.o.teller 4 months ago

Last reply by James (On Leave) 4 months ago

Certificate transparency on version 135 - security.pki.certificate_transparency.disable_for_hosts missing in GPO ?

Hello community, i would like to ask about how to deploy security.pki.certificate_transparency.disable_for_hosts globally for users? With version 135 a lot of producti… (read more)

Hello community,

i would like to ask about how to deploy security.pki.certificate_transparency.disable_for_hosts globally for users? With version 135 a lot of production webapps stopped working and as of now , we have to do manual modification in about:config. Our company has over 300k users , so the possible disruption might arise very quickly and there will be significant loses in production enviroment.

Is there a way how to deploy this specific setting via GPO/SCCM ?

Thank you

Asked by tomas.jetel 4 months ago

Last reply by Mike Kaply 4 months ago

Inquiry Regarding Group Policy for Mozilla Firefox Browser Restart Notifications

Dear Mozilla Firefox Team, I hope this message finds you well. We manage a network of workstations that frequently utilize the Mozilla Firefox browser. Recently, we ha… (read more)

Dear Mozilla Firefox Team,

I hope this message finds you well.

We manage a network of workstations that frequently utilize the Mozilla Firefox browser. Recently, we have encountered a situation where many of our systems are showing vulnerabilities due to pending browser updates. The updates are being installed successfully; however, users often neglect to restart the browser, which is crucial for completing the update process and ensuring security.

To address this, we would like to inquire if there is an existing Group Policy that can be configured to automatically notify users when they need to restart their Firefox browser to apply the latest updates. Such a feature would greatly assist us in maintaining the security integrity of our workstations and ensuring that users are made aware of the importance of restarting their browsers when prompted.

If this functionality is not currently available, we would appreciate any insights on potential workarounds or future plans to incorporate such a feature.

Thank you for your attention to this matter. We look forward to your response.

Asked by rupai.tarafder 3 months ago

Last reply by James (On Leave) 3 months ago

Camera block settings managed by MDM is not working

I am trying to manage Firefox browser for our users with MDM. On doing so, I can't able to get expected output on blocking the camera access for certain websites with the… (read more)

I am trying to manage Firefox browser for our users with MDM. On doing so, I can't able to get expected output on blocking the camera access for certain websites with the following OMA-URI.

./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Camera/Camera_Block

I can add websites in allow section and even lock the setting so that the users can't change. But facing issues with blocking camera access.

Is there any place where I can see the log if there are any error encountering by any chance? Any insights or suggestions would be greatly appreciated.

Thanks in advance!

Asked by Laurel 2 months ago

Last reply by Mike Kaply 2 months ago

April 29th update to firefox ESR has broken viewing streams on twitch.tv

I confirmed this problem on two separate computers(windows 7 and windows 11) and version 115.23.0 of Firefox ESR can not properly play streams on twitch.tv Audio will pl… (read more)

I confirmed this problem on two separate computers(windows 7 and windows 11) and version 115.23.0 of Firefox ESR can not properly play streams on twitch.tv

Audio will play, but the video does not load with only a black screen with question mark icon replacing video feed.

Asked by explode337 1 month ago

Last reply by Mike Kaply 3 weeks ago