Firefox Community Forum

Below is the content-security-policy Firefox loads for chatGPT:

default-src 'self'; script-src 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'wasm-unsafe-eval' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; script-src-elem 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'sha256-RvbVrdDS11FSnQaULCOgXPA5u0nMP2Im1d2pGiRBGC4=' 'sha256-eMuh8xiwcX72rRYNAGENurQBAcH7kLlAUQcoOri3BIo=' auth0.openai.com challenges.cloudflare.com chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://apis.google.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://docs.google.com https://jidori.g1.internal.services.openai.org https://js.live.net/v7.2/OneDrive.js https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www-onepick-opensocial.googleusercontent.com wss://*.chatgpt.com wss://*.chatgpt.com/; img-src * 'self' blob: data: https: https://docs.google.com https://drive-thirdparty.googleusercontent.com https://ssl.gstatic.com; style-src 'self' 'unsafe-inline' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; font-src 'self' data: https://*.oaistatic.com https://fonts.gstatic.com; connect-src 'self' *.oaiusercontent.com api-iam.intercom.io api-js.mixpanel.com browser-intake-datadoghq.com chatgpt.com/ces fileserviceuploadsperm.blob.core.windows.net http://0.0.0.0:* http://localhost:* https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.onedrive.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://content.googleapis.com https://docs.google.com https://events.statsigapi.net https://featuregates.org https://graph.microsoft.com https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www.googleapis.com o33249.ingest.sentry.io statsigapi.net wss://*.chatgpt.com wss://*.chatgpt.com/ wss://*.intercom.io wss://*.webpubsub.azure.com; frame-src challenges.cloudflare.com https://*.sharepoint.com https://content.googleapis.com https://docs.google.com https://onedrive.live.com https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ js.stripe.com; worker-src 'self' blob:; media-src blob: 'self' *.oaiusercontent.com fileserviceuploadsperm.blob.core.windows.net https://cdn.openai.com https://persistent.oaistatic.com; frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj; report-to chatgpt-csp-new; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub1f79f8ac903a5872ae5f53026d20a77c&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=version%3Achatgpt-csp-new

Notice that it includes " frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj"

Would this extension be installed in the computer, kind of like the extensions that are loaded from Chrome (i.e., C:\Users\myUser\AppData\Local\Google\Chrome\User Data\extensions_crx_cache)?

Thanx

I've seen cites that prove that Mozilla's latest policy updates (thanks for no notice) are now positioning Firefox to sell our data for both ad targeting and AI training purposes. I oppose both, and have no use for Firefox if it joins those already disrespecting and monetizing user privacy in those regards. How do I a) ensure I'm getting the plain language notices of further policy updates, and b) register my dismay with Firefox for this betrayal? While you're coming up with an answer, I'll be discontinuing my monthly support for the Mozilla Foundation. I have HAD IT with the greed people ruining everything.

I'm using 107.0.1 vers. At this link it states: https://support.mozilla.org/en-US/kb/view-pdf-files-firefox-or-choose-another-viewer#w_use-a-different-pdf-viewer-for-downloaded-pdf-files

Disable the built-in PDF viewer and use another viewer

You can also set a different third-party PDF viewer to handle PDF files, instead of Firefox’s built-in PDF viewer. To switch from using the built-in PDF viewer to another viewer: 1. Click the menu button and select . 2. In the panel, go down to the Applications section. (SO WHERE IN THE HELL IS THIS SECTION???) YOU CAN'T DO I never selected Mozilla to open any pdf and there's no where to opt out or change based on what all the troubleshooting tips say... All these tips must be located on a much older version of Firefox cause they ain't in my version OR they are hid under some dubious section... Pretty frustrating....when you want to use Adobe and can't cause I'm locked in under Firefox....don't know how that has happened unless it was done automatically under one of the many current upgrades that have been coming down over the last month.

Firefox is already a product that works and is probably the best alternative to any of the other major browsers out there. It's a product that I've been happy to use for many, many years. So why is it being ruined by this needless push to add in "AI"? I don't want it. I don't want any part of it to touch my experience using this browser. I want either an easy way to completely turn it off so it can't suck up my data and expose my private information, or not have it be included at all. I will actively be looking for alternative browsers if these plans continue.

I have a question about using Firefox PDF Editor. I copied some text from a PDF document that is on my computer, by highlighting the text and then hitting Ctrl+C. The text copied onto my clipboard OK. Then I opened a blank PDF document in the Firefox PDF Editor and tried to paste that text into the blank document, but I wasn't able to do so because when I right-clicked on the blank document and then clicked on "paste", nothing happened. This apparently is because the word "paste" is faded-out in the drop-down menu (i.e., it does not appear in prominent bold print). Google's Artificial Intelligence seems to indicate that the technique I used would work (see screenshot which I've uploaded). But it didn't work, so can anyone please tell me how can I paste text into that blank document?

Hi all,

I have a question regarding the permission requests of the Simple Tab Groups extension by Drive4ik.

As I'm sure many of you know, this extension needs to: This add-on needs to:

• Download files and read and modify the browser’s download history
• Monitor extension usage and manage themes
• Display notifications to you
• Access recently closed tabs
• Hide and show browser tabs
• Access browser tabs
• Store unlimited amount of client-side data
• Access your data for all websites

This add-on may also ask to: Read and modify bookmarks

Theoretically, I find this extension useful but I am concerned about the "Access your data for all websites" requirement. I read through Mozilla's permission request messages for Firefox extensions documentation and it seems like granting this extension these permissions would be a huge risk for the work I do– investigative journalism. It seems like I'll trade organizational benefits for a wider attack surface.

Can anyone speak more about the risks involved with using this extension, the trustworthiness of the developer, and why it needs the "Access your data for all websites" capability?

Thank you.

I am very much against the utility of modern day AI for the Firefox Browser. More often than not, integration of AI has lead to several consumers having their data read and used against their consent, which leads to both ethical and privacy issues. Firefox as a browser has no need for AI, especially when it lacks its own search engine and thus relies on sites such as Google and DuckDuckGo which already make use of modern day AI.

I implore you to rethink the decision of integrating AI into the Firefox Browser. It is, truthfully, more trouble than it is worth and lacks trust from consumers.

Is there a security setting that allows me to show all my passwords rather than having to toggle them on each time?

I am a recluse. There's never anyone looking over my shoulder. I just don't want to have to mess with it anymore.

If there isn't, could some kind developer please make an add-on?

I am using two computers: an iMac (late 2009) running 10.13.6 (High Sierra) and a Macbook Pro (13-inch, 2012) running 10.15.7 (Catalina).

Thank you!

K

I am looking to turn on review checker and cannot see how to do it. I don't have the price tag icon displayed nor do I have any reference to Review Checker in my settings. I'm wondering if my version of Firefox supports it (133.0). Any ideas?

Are Firefox extensions sandboxed from the rest of the operating system? Suppose I have installed a malicious extension/add-on on my system. Would it be possible for the extension to access and tamper with my operating system? I do not care if it tampers with the browser tabs or data inside the browser as long as it does not have a way to tamper with my OS. Using MacOS Sonoma

"hi yes we're firefox, a private browser that prides ourselves on being without bloatware. but we're going to add ai integration! yay!" Are you kidding me? What is wrong with you? This new CEO joins and wants to destroy what Firefox *prides itself on* and WHY PEOPLE use it. I am very disappointed. I converted to Mozilla from Google years ago and have loved it ever since. It's such an absolute shame; I will have to find a new company to support. Was the point of Mozilla not to create private, secure programs? Do not integrate AI. We don't want it. We hate it. It's useless and it kills the earth. And I sure as heck won't be comfortable storing my passwords in my account anymore! You will destroy this.

I followed your instructions but they did not work. Specifically, I clicked on "Exceptions" after "Ask to save passwords," next to which I had clicked the box. Under exceptions, I put the URL for my bank. I clicked on "Block" and "Save Changes." Nevertheless whenever I go to my bank's log in page, it still autofills my user ID and password. (Yesterday I accidentally clicked the box when signing in to my bank's web page "Save User ID." Even though it only referred to my User ID, it now autofills both that and my password.

Also, even though there is a (non-working) Exceptions page for Saved Passwords, there is no such page for Saved User IDs.

Btw, when I used another browser to sign in to my bank's website, it did not autofill, so it's not the bank's software that is autofilling.

Thanks, Joe

I am looking for confirmation that Mozilla is moving to an 'AI browser'.

Will there be an option to not use this data harvesting LLM garbage or will mozilla be abandoning their core values?

I have a Logitech Streamcam that I have been having some problems with. I noticed that Firefox stopped working with my Webcam some time ago and I can't seem to figure out why.

My webcam works fine on Chrome and using the camera app on my desktop. I hooked the webcam up to my Macbook and was able to connect to it just fine, even using Firefox.

I tested my webcam using this website: https://webcamtests.com/check When I go there I get this error message: "Could not find a web camera, however there are other media devices (like speakers or microphones). Most likely, this means that your webcam is not working properly or your browser cannot access it."

When I try to have it forcibly start the camera it gives me this error message: "NotFoundError: The object can not be found here.; DOMException".

I tried clearing the cache, running Firefox in safe mode, clearing all privacy and security settings, and reinstalling Firefox but none of it help, I also tried clearing the cache and got the same result.

Windows security settings show Firefox last accessed my webcam on 2021-11-08 and there are no access requests from Firefox since then.

Any idea of whats going on or what troubleshooting I can do from here?

Problem: Persistent 150 KB of Cached Web Content For several years, I have gone to “Settings” / “Privacy & Security” / “Cookies and Site Data,” clicked the Clear Data…” button, checked both “Cookies and Site Data,” and “Cached Web Content,” and clicked “Clear”, and consistently gotten BOTH “Cookies and Site Data,” and “Cached Web Content” down to “0” zero. Recently, I have been unable to “Cached Web Content” to go below “150 KB of disk space.”

         I have NOTHING listed in “Manage Cookies and Site Data” or “Exceptions -- Cookies and Site Data.”
         I have tried reinstalling, but the problem has persisted.
         On the assumption that this is malware problem, I have continued to use Mozzella VPN, but stopped using the program for browsing, etc.  Should I stop using it altogether until the problem is fixed?
         Can you tell me how to get rid of the last “150 KB” of “Cached Web Content”?

I went to settings and then to privacy and security and tried to find auto fill to remove credit card info. I couldn't find the setting the browser told me to find.

I signed up & paid for Mozilla Monitoring Premium. I get monthly reports from then, but when I click on "automatically delete data from brokers," I'm asked to sign up for Premium again. Please help.