Firefox Community Forum

Hello all

There was a pop-up on my Mac'S Firefox asking if I allow Firefox access to my local network devices. I clicked on 'No' And obviously now I can't access for example my router's webpage or any other webpage fromo any devices on my local network. How I can switch it back? Internet access is working fine.

Many thanks, Bogdan

When I type in the search bar, for example, 3+3 (also tried 3 + 3), when I enter, it will give me this "3 3" and will just show results instead of the calculator.

It, however, still work normally if I were to write "3 plus 3"

Hi, During some tests I found that FF 115.19.0esr can still execute arbitrary JS similarly to CVE-2024-4367. I’ve checked the versions and > 115.11esr should be patched. Any payload with ‘/JS’ taken from https://github.com/luigigubello/PayloadsAllThePDFs/tree/main will do. Since this is probably important – FontMatrix is *not* working (no JS), original PoC (https://codeanlabs.com/wp-content/uploads/2024/05/poc_generalized_CVE-2024-4367.pdf) is also *not* working. I also wasn’t able to call an external script and so far haven’t found any path to exploit it beyond an alertbox. However, it still bothers me a lot and I’d like to know whether it’s the correct, expected behavior with FF+pdf.js, is it a vulnerability, or maybe my browser was somehow corrupted or is using some other mechanism that’s not within your control (my settings? about:config?).

Steps to re-create: 1. Open file in notepad 2. Add ‘/OpenAction 99 0 R’ after ‘lang’ in ‘1 0 obj section’ 3. After ‘endobj’ add ‘99 0 obj <</Type /Action /S /JavaScript /JS (app.alert\(1\);)>>’ 4. Result – alertbox popping twice

I can't watch Twitch live stream and videos after updated.When I watching live stream on Twitch, the stream start showing some old tv effect but in colours green. I thought was Twitch problem, then I changed to watch video from my college by using their website. But it still has that effect. But I can watch Youtube videos with no problems. Then i changed to use Microsoft Edge to watch Twitch, surprisingly with no problem. I already updated to the latest version in Firefox. Can anyone help me Please. Thank You

When I play any video on https://www.bilibili.com/ this chinese website After finish the video,The Firefox get white screen and crash And this happen every single time, There is nothing I can do The crash log is here: bp-c489f92a-e918-43ba-ab0b-589210240812

I get a different UI when I open NotebookLM from google. My pixel tablet uses Chrome and it loads with the standard 3 panels but in Firefox I only get one screen. Everything else works in the program.

So my internet speed is around 100 Mbps but i only get 10 to 12 Kbps when download a small file, idk why because i tried using ethernet and it is still 10 to 12 kbps (sorry for bad english)

I just upgraded from an older computer OS to Windows 11. I imported my bookmarks but really hate the new look of the bookmarks bar in Win11. The icons are all generic and have no color. I've attached a screen shot illustrating.

I am trying to access certain HTTPS websites and some of them show PR_CONNECT_RESET_ERROR in Firefox. This error is not present in Edge or Chromium.

Here's what I've tried (none of these works):

• DNS over HTTPS turned off
• Uninstall all add-ons
• Reinstall Firefox
• Create new profile and set it as default
• Delete/rename certs.db in the Firefox profiles folder.

The only fix that works is to use Troubleshoot Mode every time I visit these websites which is not practical. Any ideas on what could be the problem?

I don't know if this is relevant but one of the websites that does not work is https://alexan.com.ph/

The font size in "Manage Bookmarks" is way too large, both in the sections list menu on the left and the list of bookmarks. I checked my userChrome.css file as well as the layout.css.devPixelsPerPx entry in about:config and there's nothing there to explain why only the "Manage Bookmarks" text is so large.

It's possible I changed a setting somewhere that's causing this. But I'm stumped re: what setting might be controlling the font size in only that UI. All other Firefox text sizes are good.

Thanks to anyone who knows where I should be looking

Firefox 134.0.1 (64-bit) Windows 10

To whom it may concern,

I have an angular application accessing data from a 3rd party data provider. To get data, POST-requests are sent to the data provider REST API (https://capzlog.aero). The application works correctly using Google Chrome and Microsoft Edge. However, when using Firefox, the following error appears:

"Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs. (Reason: CORS request did not succeed). Status code: (null)."

As the POST request contains basic authentication, a preflight-request (OPTIONS) is first sent to the data provider. This request fails when using Firefox (but not when using Chrome or Edge), see attached screen-shots.

I have spent 4 days on the internet trying to figure out a solution, but I could not solve the issue. I tried the following: 1) check the certificates of the 3rd party provider (https://capzlog.aero): There are no issues. 2) start Firefox in safe-mode, disactivating the "Enhanced Tracking Protecting", clearing the cache. 3) changing the following Firefox settings:

   security.enterprise_roots.enabled (true<->false)
   security.tls.version.min (1<->3)
   security.tls.version.max (2<->4)
   network.http.network-changed.timeout

I tried sending the "OPTIONS"-request using curl and it worked as expected:

curl --verbose -XOPTIONS -H "Access-Control-Request-Method: POST" -H "Origin: https://projectz.numericalsolutions.ch" https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs

• Host capzlog.aero:443 was resolved.
• IPv6: (none)
• IPv4: 156.67.9.80
• Trying 156.67.9.80:443...
• Connected to capzlog.aero (156.67.9.80) port 443
• ALPN: curl offers h2,http/1.1
• TLSv1.3 (OUT), TLS handshake, Client hello (1):
• TLSv1.3 (IN), TLS handshake, Server hello (2):
• TLSv1.2 (IN), TLS handshake, Certificate (11):
• TLSv1.2 (IN), TLS handshake, Server key exchange (12):
• TLSv1.2 (IN), TLS handshake, Server finished (14):
• TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
• TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
• TLSv1.2 (OUT), TLS handshake, Finished (20):
• TLSv1.2 (IN), TLS handshake, Finished (20):
• SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / secp384r1 / rsaEncryption
• ALPN: server accepted h2
• Server certificate:
• subject: CN=capzlog.aero
• start date: Dec 31 10:14:59 2024 GMT
• expire date: Mar 31 10:14:58 2025 GMT
• subjectAltName: host "capzlog.aero" matched cert's "capzlog.aero"
• issuer: C=US; O=Let's Encrypt; CN=R10
• SSL certificate verify ok.
• Certificate level 0: Public key type RSA (3072/128 Bits/secBits), signed using sha256WithRSAEncryption
• Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
• Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
• using HTTP/2
• [HTTP/2] [1] OPENED stream for https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs
• [HTTP/2] [1] [:method: OPTIONS]
• [HTTP/2] [1] [:scheme: https]
• [HTTP/2] [1] [:authority: capzlog.aero]
• [HTTP/2] [1] [:path: /api/pel/public/externalsystemflights/GetMissingIDs]
• [HTTP/2] [1] [user-agent: curl/8.6.0]
• [HTTP/2] [1] [accept: */*]
• [HTTP/2] [1] [access-control-request-method: POST]
• [HTTP/2] [1] [origin: https://projectz.numericalsolutions.ch]

> OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs HTTP/2 > Host: capzlog.aero > User-Agent: curl/8.6.0 > Accept: */* > Access-Control-Request-Method: POST > Origin: https://projectz.numericalsolutions.ch > < HTTP/2 204 < cache-control: private < server: Microsoft-IIS/10.0 < access-control-allow-origin: https://projectz.numericalsolutions.ch < access-control-allow-credentials: true < x-aspnet-version: 4.0.30319 < x-powered-by: ASP.NET < date: Thu, 16 Jan 2025 07:12:32 GMT <

• HTTP/2 stream 1 was not closed cleanly: HTTP_1_1_REQUIRED (err 13)
• Downgrades to HTTP/1.1
• Connection #0 to host capzlog.aero left intact
• Issue another request to this URL: 'https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs'
• Found bundle for host: 0x55ecfa0a46e0 [can multiplex]
• Hostname capzlog.aero was found in DNS cache
• Trying 156.67.9.80:443...
• Connected to capzlog.aero (156.67.9.80) port 443
• ALPN: curl offers http/1.1
• SSL reusing session ID
• TLSv1.3 (OUT), TLS handshake, Client hello (1):
• TLSv1.3 (IN), TLS handshake, Server hello (2):
• TLSv1.2 (IN), TLS handshake, Finished (20):
• TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
• TLSv1.2 (OUT), TLS handshake, Finished (20):
• SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / secp384r1 / UNDEF
• ALPN: server accepted http/1.1
• Server certificate:
• subject: CN=capzlog.aero
• start date: Dec 31 10:14:59 2024 GMT
• expire date: Mar 31 10:14:58 2025 GMT
• subjectAltName: host "capzlog.aero" matched cert's "capzlog.aero"
• issuer: C=US; O=Let's Encrypt; CN=R10
• SSL certificate verify ok.
• using HTTP/1.x

> OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs HTTP/1.1 > Host: capzlog.aero > User-Agent: curl/8.6.0 > Accept: */* > Access-Control-Request-Method: POST > Origin: https://projectz.numericalsolutions.ch > < HTTP/1.1 204 No Content < Cache-Control: private < Transfer-Encoding: chunked < Server: Microsoft-IIS/10.0 < Access-Control-Allow-Origin: https://projectz.numericalsolutions.ch < Access-Control-Allow-Credentials: true < X-AspNet-Version: 4.0.30319 < X-Powered-By: ASP.NET < Date: Thu, 16 Jan 2025 07:12:32 GMT <

• Connection #1 to host capzlog.aero left intact

Here, a comparison of the "OPTIONS"-HTTP-request as sent by Chrome and by Firefox:

CHROME OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9a comparison of the "OPTIONS"-HTTP-request as sent by Chrome and by Firefox: Access-Control-Request-Headers: authorization,content-type Access-Control-Request-Method: POST Connection: keep-alive Host: capzlog.aero Origin: https://projectz.numericalsolutions.ch Referer: https://projectz.numericalsolutions.ch/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36

FIREFOX OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs undefined Host: capzlog.aero User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: */* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br, zstd Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Referer: https://projectz.numericalsolutions.ch/ Origin: https://projectz.numericalsolutions.ch Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Priority: u=4 TE: trailers

And the response header as seen by Chrome:

CHROME HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Language: en Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://projectz.numericalsolutions.ch Access-Control-Allow-Credentials: true Set-Cookie: AppSettings=Culture=en-US&Language=English&CountryAlpha2=CH; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure; SameSite=Lax X-Powered-By: ASP.NET Date: Thu, 16 Jan 2025 07:19:59 GMT Content-Length: 2

Here, a comparison of the Network Traffic as seen for Chrome and for Firefox:

CHROME 17:07:46.550256 IP ANYPC.57562 > 156.67.9.80.https: Flags [P.], seq 1480736564:1480737180, ack 2430285572, win 501, length 616 17:07:46.557654 IP 156.67.9.80.https > ANYPC.57562: Flags [P.], seq 1:393, ack 616, win 8212, length 392 17:07:46.557654 IP 156.67.9.80.https > ANYPC.57562: Flags [P.], seq 393:427, ack 616, win 8212, length 34 17:07:46.557683 IP ANYPC.57562 > 156.67.9.80.https: Flags [.], ack 393, win 501, length 0 17:07:46.557688 IP ANYPC.57562 > 156.67.9.80.https: Flags [.], ack 427, win 501, length 0 17:07:46.558334 IP ANYPC.57562 > 156.67.9.80.https: Flags [F.], seq 616, ack 427, win 501, length 0 17:07:46.558741 IP ANYPC.42786 > 156.67.9.80.https: Flags [S], seq 2926210792, win 64240, options [mss 1460,sackOK,TS val 2936933242 ecr 0,nop,wscale 7], length 0 17:07:46.562927 IP 156.67.9.80.https > ANYPC.57562: Flags [F.], seq 427, ack 617, win 8212, length 0 17:07:46.562962 IP ANYPC.57562 > 156.67.9.80.https: Flags [.], ack 428, win 501, length 0 17:07:46.563492 IP 156.67.9.80.https > ANYPC.42786: Flags [S.], seq 1974100572, ack 2926210793, win 65535, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 17:07:46.563514 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 1, win 502, length 0 17:07:46.565558 IP ANYPC.42786 > 156.67.9.80.https: Flags [P.], seq 1:1743, ack 1, win 502, length 1742 17:07:46.572094 IP 156.67.9.80.https > ANYPC.42786: Flags [.], ack 1743, win 8212, length 0 17:07:46.572094 IP 156.67.9.80.https > ANYPC.42786: Flags [P.], seq 1:161, ack 1743, win 8212, length 160 17:07:46.572133 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 161, win 501, length 0 17:07:46.572276 IP ANYPC.42786 > 156.67.9.80.https: Flags [P.], seq 1743:1794, ack 161, win 501, length 51 17:07:46.572421 IP ANYPC.42786 > 156.67.9.80.https: Flags [P.], seq 1794:3197, ack 161, win 501, length 1403 17:07:46.583942 IP 156.67.9.80.https > ANYPC.42786: Flags [.], ack 3197, win 8206, length 0 17:07:46.710020 IP 156.67.9.80.https > ANYPC.42786: Flags [P.], seq 161:638, ack 3197, win 8206, length 477 17:07:46.751327 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 638, win 501, length 0 17:07:46.754201 IP 156.67.9.80.https > ANYPC.42786: Flags [P.], seq 161:638, ack 3197, win 8206, length 477 17:07:46.754231 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 638, win 501, options [nop,nop,sack 1 {161:638}], length 0$

FIREFOX 17:08:28.962851 IP ANYPC.35980 > 156.67.9.80.https: Flags [S], seq 2319755284, win 64240, options [mss 1460,sackOK,TS val 2936975646 ecr 0,nop,wscale 7], length 0 17:08:28.972248 IP 156.67.9.80.https > ANYPC.35980: Flags [S.], seq 1053801102, ack 2319755285, win 65535, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 17:08:28.972330 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 1, win 502, length 0 17:08:28.974266 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 1:1894, ack 1, win 502, length 1893 17:08:28.987389 IP 156.67.9.80.https > ANYPC.35980: Flags [.], ack 1894, win 1026, length 0 17:08:28.987433 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 2921:3937, ack 1894, win 1026, length 1016 17:08:28.987461 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 1, win 502, options [nop,nop,sack 1 {2921:3937}], length 0 17:08:28.987598 IP 156.67.9.80.https > ANYPC.35980: Flags [.], seq 1:1461, ack 1894, win 1026, length 1460 17:08:28.987647 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 1461, win 524, options [nop,nop,sack 1 {2921:3937}], length 0 17:08:28.987682 IP 156.67.9.80.https > ANYPC.35980: Flags [.], seq 1461:2921, ack 1894, win 1026, length 1460 17:08:28.987707 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 3937, win 547, length 0 17:08:28.994553 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 1894:2052, ack 3937, win 547, length 158 17:08:29.005007 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 3937:3988, ack 2052, win 1025, length 51 17:08:29.005007 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 3988:4057, ack 2052, win 1025, length 69 17:08:29.005700 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 4057, win 547, length 0 17:08:29.006086 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 2052:2151, ack 4057, win 547, length 99 17:08:29.006123 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 2151:2577, ack 4057, win 547, length 426 17:08:29.008948 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 2577:2615, ack 4057, win 547, length 38 17:08:29.018116 IP 156.67.9.80.https > ANYPC.35980: Flags [.], ack 2615, win 1023, length 0 17:08:29.018116 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 4057:4095, ack 2615, win 1023, length 38 17:08:29.024518 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 4095:4322, ack 2615, win 1023, length 227 17:08:29.024518 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 4322:4364, ack 2615, win 1023, length 42 17:08:29.024943 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 4364, win 570, length 0 17:08:35.342337 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 1974101210, win 501, length 0 17:08:35.349317 IP 156.67.9.80.https > ANYPC.42786: Flags [.], ack 1, win 8206, length 0

I really do not know what to do anymore to solve that problem.

As the problem is impacting hundreds of users, I really hope there is a solution.

In advance thanks for your help.

I am using Firefox 128.5.0esr (64-bit) on Debian 12. This is the browser that comes installed with the system. Recently, an offline translation feature was added to Firefox. In settings, you can download various languages. I would like to know where language models for offline translation are stored. The downloaded languages I want to copy to another computer without internet connection so that I can use the offline translation on this computer.

Hello to all,

I wanted to use DoH (dnsforge.de) under “maximum protection”, but with one exception: I would like Ecosia.org to be able to place ads for me, because I am convinced of Ecosia and want to support this project. Tested this with Cloudflare as well, setting up an exception here does not work either.

Now the exception set in Firefox has no effect. It should not be due to the DNS provider, because Ecosia.org is not blocked and has even been whitelisted.

What is the expected behavior of the “maximum protection” setting?

Kind regards

So, I'm trying to sign in to D&D Beyond with my google account. It works fine on my phone but when I try to do it on my desktop it just endlessly loads. I've already tried turning my pc off and on again and clearing cookies. Has anyone else had a similar problem.

I have two computers. Both sign into the same Firefox account. Both instances of Firefox are the same version (134.0.1 64-bit).

On my main computer, creating a new tab is set to Firefox Home (default), and clicking the "+" sign to create a new tab results in the recommendations appearing as seen in the first image (firefox_2025-01-19_17-42-57.png)

On the other computer, creating a new tab is set to Firefox Home (default), and clicking the "+" sign to create a new tab results in the recommendations appearing as seen in the second image (firefox_2025-01-19_17-43-57.png)

How to I get both instances of Firefox to do the same thing when creating a new tab, i.e. organize the recommendations like the second image?

Firefox is no longer saving all my history. OR, I can't find it. I can't find it because: HISTORY/SHOW ALL HISTORY is now only showing "today". This occurred with v133, but I do not know if it occurred with any given update. I updated to 134.0.1. That did not fix problem. I have not tried regressing.

In the past, I was able to save YEARS of history (although I sometimes created a new profile to restart the history file due to its size).

1. I was using the "DYNAMIC HISTORY" addon, which worked fine for years. When I found Firefox was showing only the current days' history, I disabled that addon. Didn't fix anything.

2. "Delete cookies and site data when Firefox is closed" option IS NOT SELECTED. NEVER HAS BEEN

3. OTHER SETTINGS: no - Always use private browsing mode yes - Remember browsing and download history yes - Remember search and form history NO - Clear history when Firefox closes

any suggestions or help would be greatly appreciated. I am also baffled: googling this problem comes up empty handed.

.

As far as I can tell from reading the help pages, the Firefox translation feature should automatically translate any page in any available language, unless explicitly set not to do so. However, I observe that no translation occurs unless I first select text, right click, and select translate, and even then, the translation is presented as unformatted text in a separate dialog box, which is not much better than copying and pasting web pages into some other translator service. Am I missing something here?

Sadly, this is not even close to being competitive with the Google Translate level of functionality. I use Google Translate every day to read package labels in grocery stores, road signs, and a host of other written sources of information. Occasionally, I even use it to hold conversations with people I would not otherwise be able to talk to. So far, I am nearly monolingual, and I am unwilling to do without this; I probably wouldn't travel if it were not available. It does tie me to that fraction of the surface area of the earth where high speed internet access is generally available, but I don't really need to go any places where it is not; I am not trying to hike across Antarctica. I understand that there is a loss of privacy when dealing with Google, but I do whatever I can to fend that off, and the value of the free services I receive in exchange is huge. What's the future of Firefox in this respect?

In Firefox, and only in Firefox, I get 'Failed to verify your identity' on these sites. I have updated MacOS and Firefox, rebooted, tried a different DNS, and disabled all of my extensions. With extensions disabled I don't get the error, but the login site won't accept my login at all. See the attached image. I can't think of anything else to try.