Firefox Community Forum

I recently opened Firefox to see a new flagged warning under my toolbar that says "The security sandbox is disabled. Your configuration is unsupported and less secure."

I have gone into about:config and adjusted every security.sandbox element to see if that would change anything; it did not.

I am running on Windows 11 Home so I cannot install or properly run Windows Sandbox.

I would either like a solution to enable the sandbox once again, or just remove the notification from the toolbar.

Hi,

I noticed that in the latest release (I tried both MacOS and Windows 11 ARM versions) that the "network.cookie.sameSite.laxByDefault" is no longer enabled, and cookies set by applications without specifying the flag, are not set with Lax and are sent in cross-origin requests. Could you clarify if this is intentional and why the change has been made?

Thanks

Tonight I was roaming around my Firefox settings looking at something else, when I noticed this AI piece pre-checked. Why is FIREFOX, who is supposed to be for privacy and security, authorizing an update that automatically choose AI? Not cool Mozilla. Not Cool. Anyone else have this? and yes, I've already fixed it ;-)

Hi all the people,

I was just surprised to see this in an Apache HTTP log: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1"

This bugs me. My first guess would be that a Webkit based Firefox could not be qualified as really Firefox. Although that, I could imagine a Firefox for iOS or MacOS based on Webkit, may be, but it says it is on Windows, which makes less sense.

I suspect this is a user agent string spoofing, but I just need to be sure (I try to get ride of far too invasive bots, while I’m afraid to disrupt browsing from legitimate web users).

With thanks and my apologizes for such a question which may looks obvious or strange to people who know for sure.

There must be a way to turn off this popup off. This is REALLY annoying when it covers a password box and to remove it i must click outside it and I lose focus on the password box. If you must put he box there then at least leave the first part of the password box clear so I cab click on it and not have to click again to get the focus back.

After all of those years, am I witnessing now that FF literally failing?

How could it become mysterious by that it lets user's location leaked to github even though: - third-party HiFi company VPN is active and in OpenVPN UDP/TCP, Wireguard, IPv6 On/Off, etc... - No bookmark to corresponding website - Cache and website data were so-called cleaned, - Other browsers don't give that symptom, only FF - No related plugin, out of only 3

it's impossible to find out how it lends to the language and region query of this website every time after cleaning. Is FF getting closed app?

Is that a no-way-to-explain effect of language models' evolution is exponentially higher in every 4 months after two years?

Hi, I am using Firefox exclusively for my work Claude account, I only check my usage on it. Today, I noticed Firefox silently installed a webapp under $USER/AppData/Roaming/Microsoft/Windows/Start Menu/Programs, and it has a Claude webapp, which I neither click any install or add to my menu. I found it extremely concerning in terms of privacy, and I am wondering if any other people have similar experience.

Does Firefox "remember" any browser data from another Windows user account? I created a guest account for someone today and while I was browsing, I got redirected to a site called fy3 dot fit which had the fake captcha. I did not open the run box and did not paste any commands from it, so is the guest account compromised or do I need to nuke Windows and start again? I read on reddit that it's an infostealer but if Firefox does not remember the other user account's browser data, does that mean nothing would be stolen if I did run it?

Some extensions I use have been updated and now ask permission to "Access your data for all websites." What is the scope of this access? Can an extension which facilitates video downloads see my bank password? Can it access data for sites in a different Firefox container? Can it access sites which I use in a different browser? Can it access data for sites which, on my system, are only available to a different user? Thanks for any clarification. [I am running Firefox 149.0 under Kubuntu 24.04]

Regarding the new built in Firefox VPN. If I have Tabs open and Enable the VPN on a New Tab, does it then affect all previously opened Tabs, only the New Tab, only the New Tab and Tabs opened after that initial New Tab, or ? Also, is there a Meter Display or similar so I know how much of the 50GB VPN allotment has been used or is remaining ? Thank you, very kindly ...-- J V

I am just burned out with Firefox and not sure why I should continue to use it instead of some fork or Chromium-based browser.

It seems like every update brings some new GenAI/LLM component that is auto-enabled and difficult to disable. I do not want GenAI/LLMs in my web browser. I have dropped nearly every other application or software that has forced it on me and included it in their product. I feel like I'm trying manage a Windows system having to follow blogs to debloat, restore privacy, and restore security. GenAI/LLMs shouldn't be in my web browser. And, they should be opt-in, not opt-out in some confusing mix of GUI and about:config madness. If GenAI/LLM is so great, then make it an extension or a fork then let those folks use it from there. Don't bake it into the web browser.

I continue to use Firefox for uBlock Origin but I guess that would be possible with a Firefox-fork. However, I am just tired of having to continuously manage my Firefox browser and battle websites that only support Chromium-based browsers. If Firefox actually seemed intent on improving security and privacy then I could find the motivation but this GenAI/LLM nonsense seems the point of no return.

On my Android phone, I've switched to a Chromium-based browser given the poor state of security and hardening for the vanilla Firefox. I keep IronFox on hand but it is just easier to surf the web with a Chromium-based browser due to many websites just working better. Why should I deal with the pain and frustration of limited Firefox support when Firefox isn't even keeping up with security hardening?

As for desktop, the Firefox browser just doesn't seem as snappy or stable as I would expect. Firefox for Linux is still not supported for Slack Huddles. How is it 2026 and Mozilla/Firefox are still not fully functional with one of the major business chat platforms? Yes, I know this primarily a Slack and AWS-Chime-SDK problem but it is also a Firefox problem because there isn't much that a user can do. I've tried to prod Slack and the AWS teams numerous times to support Firefox but they've just done nothing. I also see nothing being done by the Firefox team, too.

Another example is the EdgeSuite CDN. Nearly always they block my traffic when I use Firefox. Switch to a Chromium-based browser and EdgeSuite is much less likely to block me. This is fairly consistent for the retail and financial institutions I use.

As far as I am aware, many of the security concerns brought up by Madaidan in 2022 still hold true for Firefox today, especially for Android and Linux. If this is no longer true, then it might be good for the Firefox team to post a rebuttal or update clarifying the current state of Firefox. The average users such as myself only see the Madaidan blog post and have to take it at face value. https://madaidans-insecurities.github.io/firefox-chromium.html

Anyway, I don't see a way ahead for me and Firefox but maybe you can convince me. It just seems like Firefox and Mozilla have lost their way. They no longer seem focused on security and privacy. Instead they're forcing privacy, security, and system resource disasters onto their userbases, just like Microsoft, Google, and every one of the major tech firms. I just don't see why I should use, promote, and even support Firefox going into 2026.

I accidentally clicked on a site that was supposed to be a game review site that I found on a Bing search. Now I get pop up ads for fake virus programs whenever I run Firefox.

I ran a scan with Mallware Bytes and Microsoft Defender and both scans came up clean.

I am including a screenshot of the popups.

Any ideas?

Thanks

Hi, When connecting to a HTTP:// site, when you enter your username in the username field, Firefox prompts the user with: "This connection is not secure. Logins entered here could be compromised. Learn More".

How can I turn this message off?

We are running Firefox in kiosk mode in the browser (on a Windows 11 PC), and they are logging into an HTTP site using a touch screen, but when they click into the username box, they sometimes miss touch where to enter this username and instead touch the link mentioned in the message. This then takes them to the Mozilla homepage, but because it is running in kiosk mode, they are unable to navigate back, and they are prevented from closing and restarting Firefox. This is why we need to turn the message off.

On my Windows 11 computer messages keep cropping up supportably from Firefox. I have switched the computer off. this is from my old computer. I don't know what to do now. Colin

My cat jumped on my keyboad and Firefox detected 'unusual activity' She probably hit a combination of keys which lead to said activity. Instantly, I had to verify whether I was a human. I did, but really, it was my cat. Neither my cat, nor myself have bad intentions. I just thought Firefox security should know that these things might happen.

I hope that my cat's activity didn't compromise my account. Maybe 'unusual activity' should be less strict, though I do understand that Firefox must be vigilant. Maybe it would be a good idea to let users describe what happened, before sending Captcha?

I attempted to put in an address of what I thought was a website today on mozilla. I soon found out that it was not available or a proper website.

Now I am getting alarming notices with heading Mozilla Firefox all via what looks like an Indian website, saying 1. Click to secure your 2. Trojan detected Fix it now. 3. Critical Error. Click here to remove them.

I have not clicked on any part apart from the x top right to remove the notifications. I can send photos of them

I have scanned with my Windows Security repeatedly and nothing.

Max

PS. The messages are obstinate to remove and it takes effort to x them.

Hi,

Microsoft and Google are part of Anthropic's Project Glasswing but Mozilla is not. I am concerned about Firefox security if Mozilla in not being included. What is your plan to participate? Do I need to switch browsers in the meantime? Please advise. Thanks.

Cheers

When accessing important accounts on websites, like financial websites, I've always heard you should close your browser when you're done with the secure website. If you log on in a PRIVATE window and close the private window afterword but leave the main FireFox window open, is that the same thing? I think it is and the private window will delete any login or activity info as if you closed the browser, I just want to confirm with someone more knowledgeable before I make a bad assumption. It also seems to have the added benefit of deleting anything you might download and save elsewhere from the download folder so you don't have to delete it from the DL folder and then the recycle bin. Seems like it's good practice to use the private window this way. Again, just looking for a 2nd opinion.

Thanks,

I have an old Mac desktop computer and use firefox as my browser. I go to hotmail and click on and up comes my inbox. I click on an item but nothing opens. then I get a message up top saying firefox prevented the opening of one or more pop up windows. I have changed my password with microsoft. That has not improved things.