Firefox Support Forum

Below is the content-security-policy Firefox loads for chatGPT:

default-src 'self'; script-src 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'wasm-unsafe-eval' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; script-src-elem 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'sha256-RvbVrdDS11FSnQaULCOgXPA5u0nMP2Im1d2pGiRBGC4=' 'sha256-eMuh8xiwcX72rRYNAGENurQBAcH7kLlAUQcoOri3BIo=' auth0.openai.com challenges.cloudflare.com chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://apis.google.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://docs.google.com https://jidori.g1.internal.services.openai.org https://js.live.net/v7.2/OneDrive.js https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www-onepick-opensocial.googleusercontent.com wss://*.chatgpt.com wss://*.chatgpt.com/; img-src * 'self' blob: data: https: https://docs.google.com https://drive-thirdparty.googleusercontent.com https://ssl.gstatic.com; style-src 'self' 'unsafe-inline' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; font-src 'self' data: https://*.oaistatic.com https://fonts.gstatic.com; connect-src 'self' *.oaiusercontent.com api-iam.intercom.io api-js.mixpanel.com browser-intake-datadoghq.com chatgpt.com/ces fileserviceuploadsperm.blob.core.windows.net http://0.0.0.0:* http://localhost:* https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.onedrive.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://content.googleapis.com https://docs.google.com https://events.statsigapi.net https://featuregates.org https://graph.microsoft.com https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www.googleapis.com o33249.ingest.sentry.io statsigapi.net wss://*.chatgpt.com wss://*.chatgpt.com/ wss://*.intercom.io wss://*.webpubsub.azure.com; frame-src challenges.cloudflare.com https://*.sharepoint.com https://content.googleapis.com https://docs.google.com https://onedrive.live.com https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ js.stripe.com; worker-src 'self' blob:; media-src blob: 'self' *.oaiusercontent.com fileserviceuploadsperm.blob.core.windows.net https://cdn.openai.com https://persistent.oaistatic.com; frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj; report-to chatgpt-csp-new; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub1f79f8ac903a5872ae5f53026d20a77c&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=version%3Achatgpt-csp-new

Notice that it includes " frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj"

Would this extension be installed in the computer, kind of like the extensions that are loaded from Chrome (i.e., C:\Users\myUser\AppData\Local\Google\Chrome\User Data\extensions_crx_cache)?

Thanx

I've added https://x.com as an exception site but it is still blocked.

This is outright censorship which is something fascists do.

Tell me how to fix your browser so I may access x.com again or I stop using Firefox forever.

I have two questions regarding the usage of a private window. I am using 126.0.1 on a mac desktop (and laptop) using 13.6.7 ventura. Long time user of firefox, but new to private windows.

1) I am using a popup blocker on firefox (UBlock Origin). Its icon shows on the browser window, but in a private window the icon disappears and I am getting popups. Do pop up blockers work in a private window? Is there a setting for that? 2) on my main browser Firefox home page I have 4 rows of shortcuts. On a private window home page there are none, and no settings icon to address this. Are shortcuts allowed on a private window home page and, if so, how to add?

Thanks

Why is firefox not showing up in my authenticator app???

I saw a previous post that has since been closed suggesting the solution be disabling 2FA authentication - with all due respect to whoever suggested that, I don't think that should be the best solution. I'd like to keep 2FA enabled. I'd just like to know why Firefox doesn't appear in my Google or Microsoft Authenticator apps. I end up having to use recovery codes which makes the process a pain.

For about 24hr now, every time I clear cookies and cache data, 20kB remain. I clear this data often, and the cookie and cache data always registers "0kB" after I click on "Clear Data", until yesterday. My OS is Ubuntu 22.04. Where can I find that file so I can delete it?

When I click on a dropdown the settings automatically open in a new tab. For instance when logging into something and choosing my password and/or username from a dropdown, when I click on my choice a new tab suddenly opens with the settings menu - specifically the autofill thru permissions area in the "privacy and security" submenu. Just started doing this randomly the other day so I rebooted the computer and that fixed the problem, but its now started doing it again. Please help?

Firefox provides the option to Remember search and form history under custom settings. I want the browser to remember search history but not remember form history. Is there a way to separate these two settings?

Good afternoon,

If necessary, I am available to add more information about this case (145005), in English or Portuguese.

Best regards,

Ana Patrícia Paquete Visual Designer

In my settings under Connected Services there is a list of devices that have signed into my firefox account. I do not recognize one of them. The Connected Service listed name is Firefox Mobile 126, Android 14. How can I find out where this is coming from?

Thank you

TL;DR : Disqus comments used to work while using privacy Strict mode now it doesn't.

After years of it working out of the get-go while using Strict mode up till recently (about a year ago this was really low on my priority list) refused to work I though it was my Ad blocker was causing issues but after setting it in the filters to allow and even after turning it off still no dice.

Removed all add-ons tried again still Disqus comment section refused to load in the websites I regularly visit. So after giving up, I just look around in the browser setting to see if there is anything that may cause conflict with certain scripts from running.

I have avg vpn. My firefox settings have a notice that "your browser is being managed by you organization. Can you please confirm this is avg vpn and not an unauthorized third party?

My FF version 126.0.1 browser history file size is stuck at 10,240 KB. Until recently it was 54,000 KB and change. I would like to get it larger. I've tried all the recent help postings relating to places.history.expiration.max_pages, places.history.expiration.transient_current_max_pages, browser.history_expire_days, browser.sessionhistory.max_entries or browser.sessionhistory_max_entries, and so on. Nothing seems to be able to change the "places" file size. Anyone have any more info on this topic?

Dear friends, I receive fake virus alerts from baseauthenticity.co.in. How can I stop this? Many thanks in advance.

I went to settings and then to privacy and security and tried to find auto fill to remove credit card info. I couldn't find the setting the browser told me to find.

I'm hoping to get some help with disabling the Insecure connection password warning in Firefox version 115.11.0.

In previous versions, I could disable this warning through the about:config settings. However, I couldn't find the specific setting (security.insecure_field_warning.contextual.enabled) that was mentioned in some online resources.

I understand the security risks involved in disabling these warnings, and I only intend to do this on a trusted website on my local network.

Could you please advise on the best approach for achieving this in Firefox 115.11.0, or any alternative solutions to manage insecure connection warnings for trusted local sites?

Thanks in advance for your help!

I use firefox (as mozilla) for decades ago. Never had issues, is super easy, fast and ...secure (?) A hacker last week have access on my Firefox, download ALL my saved passwords as CSV... as a plain TEXT and ATTACKS on my entire life!!! And the nightmare goes on and on... Stole my primary Google Account, Facebook, Instagram, Ubisoft, PayPal, Microsoft Account.... and other 20 sites beside this. For GOD sake, didn't you EVER think to place an extra security layer on this EXTREMELY SENSITIVE details??? A master password? 2FA or something else? Are you serious??? I'm so sorry BUT YOU'RE LOST MY TRUST!!!! Period!!! Give a change to your selves and PROTECT YOUR CUSTOMERS!