Firefox Support Forum

Firefox is notoriously adept when it comes to browser/user protection, (THANK YOU!!!!!!!!). Are there any plans to include protection against homograph/homoglyph attacks please? I think the simplest way would be to just search the URL for any characters that are not part of the current/usual typeset?

Hi,

I'd like to ask if there are plans in the near future to support FIDO2/WebAuthn authentication for Firefox Accounts.

My question is motivated by the fact that right now there's no way to add a secondary MFA option as backup, and the industry-standard backup codes are very clunky to store safely and use in general.

Losing access to the MFA for an account which hosts all data (and essentially the day to day optimizations of workflows - saved data, bookmarks, etc.) and starting from scratch is a terrifying prospect (I've gone through it before), especially given that Firefox Accounts right now does not have any recovery options after that point.

It would be beneficial if one would be able to add, for instance, a pair of FIDO2 keys for this purpose, or even more broadly speaking any other WebAuthn providers (like Windows Hello). Those would not only provide a better security standard, but also better failover options.

I'm sorry if this is not the right place, but I've not found a dedicated forum for Firefox Accounts issues specifically - please direct me there if there's one.

Best regards, Artur Ciesielski

I'm trying to print a PDF document without opening it. I found a [guide][1] on MDN that explains how this can be done.

```jsx

 const handleClick = (
   event: React.MouseEvent<HTMLButtonElement, MouseEvent>,
 ) => {
   event.stopPropagation();
   event.preventDefault();

   const frame = document.createElement('iframe');

   frame.onload = () => {
     frame.contentWindow.print();
   };
   // frame.style.display = 'none';
   frame.src = docflow.primaryDocumentPdfUrl;
   document.body.appendChild(frame);
 };

```

In Chrome everything works well, but in Firefox an error occurs (see below).

> Partitioned cookie or storage access was provided to > “http://localhost:3000/api/documents/5bf1c493-b8ce-4f82-9ee0-def28065c645/visualization” > because it is loaded in the third-party context and dynamic state > partitioning is enabled

[![Error][2]][2]

Storage tab screenshot:

[![Storage][3]][3]

What am I doing wrong?

 [1]: https://developer.mozilla.org/en-US/docs/Web/Guide/Printing#print_an_external_page_without_opening_it
 [2]: https://i.stack.imgur.com/SwkRq.png
 [3]: https://i.stack.imgur.com/JZYXM.png

Hello, I always use Firefox logged into my Mozilla account.

Yesterday I went to a (legitimate) site, that I had never visited before and only read one page. I didn't click on anything on that site/page, I only read that one page and left the site. Not long afterwards, I received a promotional email from that site stating "Thanks for stopping by!".

My question is: how did they know my email (the email used by my Mozilla account)? I have never received emails from that site, and as I said, I never visited it until then.

Does Firefox expose the Mozilla account email when visiting sites? This is pretty troubling. I would appreciate any input you have. Thanks

Release notes for Firefox v120.0 https://www.mozilla.org/en-US/firefox/120.0/releasenotes/

Among these release notes, "Firefox’s private windows and ETP-Strict privacy configuration now enhance the Canvas APIs with Fingerprinting Protection, thereby continuing to protect our users’ online privacy." How good or bad is the feature? There's the canvas blocker extension which might now be obsolete, then again without details this is impossible to anser. How exactly does the Canvas API enhance Fingerprinting Protection with this new update? The release notes don't explain that, where do i find details? Firefox should use this for all windows not only private ones.

Among the relase notes, "Firefox is rolling-out Cookie Banner Blocker by default in private windows for users in Germany during the coming weeks. Firefox will now auto-refuse cookies and dismiss annoying cookie banners for supported sites." I'm not german but would still like to use this feature as the cookie agreement popups are extremely annoying and time intensive to dismiss. Apparently in about:config "cookiebanners.service.mode" is the precise setting name. Does it have to be set to "1" to be active? This setting seemingly has the potential to replace extensions such as "Cookie AutoDelete" or uBlockOrigins Filterlists/Easylist cookie notices. Firefox should use this for all windows not only private ones.

Among the release notes: "Firefox has enabled URL Tracking Protection by default in private windows for all users in Germany. Firefox will remove non-essential URL query parameters that are often used to track users across the web." I don't get why this would only be active in private windows and germany. Firefox should use this for all windows not only private ones.

Among the release notes: "Firefox now imports TLS trust anchors (e.g., certificates) from the operating system root store. This will be enabled by default on Windows, macOS, and Android, and if needed, can be turned off in settings (Preferences → Privacy & Security → Certificates)." I've no idea what to think about this, is it a good or bad change and why? Don't try to fool me here, i want honest ansers no BS... is there potential for abuse? If Firefox uses CA's from the OS then what happens to firefox internal CA's, remain unchanged?

Among the release notes: "Firefox supports a new “Copy Link Without Site Tracking” feature in the context menu which ensures that copied links no longer contain tracking information." While this is a welcome change, i'd be much much more useful to replace “Copy Link Without Site Tracking” with “Open Link Without Site Tracking”... Otherwise there's the needless waste of time manually open a new tab and paste the link... This completely lacks any logic if you ask me, why didn't mozilla make it as i suggest above in the first place? Why the manually klick klick waste of time?

Lastly a question unrelated to this update, when RFP is enabled and the browser-screen-size is spoofed, if i go into fullscreenmode by accident, will this expose my true resolution or not?

Dear Colleague

this website 'https://m.nearbyme.io/search' automatically opening in a new tab. How i can stop it from automatically opening? Many other websites are also automatically opening in new tabs.

Please let me know how to stop these websites from automatically opening.

Thank you.

Hi, I am able to read a business mag on one Windows 10 Home system but on another which has Win 10 Pro , FF will not allow to STAY logged in to that magazine. I am using Windows 10 Home on the system that will not allow me to stay logged in. I have checked all settings I can think of. I have browsed all the Help Q&A here. I have chcked for all updates and confirm I am using the latest FF updates on both machines.

What could be in my settings that blocks me seeing my magazine?

Thank you. Adam

I am using Firefox 107.0.1 on a Windows 10 machine. And, I am not able to login to the SSA website (US) using Firefox. I reviewed the answers in the post (https://support.mozilla.org/en-US/questions/1354403) and tried several of the possible solutions (safe mode, rename/delete profile, reboot computer, etc) without any luck. I've attached a screenshot of the error when trying to login using Firefox.

Strangely, I've used Firefox exclusively to login (latest, maybe 6 months ago) before with no problem. It appears it is only when I currently am using Firefox. This is because I am able to use MS Edge without a problem.

Any help or suggestions are appreciated.

Thank you, Chris

Hi,

I use Firefox Developer Edition as my default testing browser. I have it set up to clear the cookies and site data when Firefox is closed. For my normal browsing I use regular Firefox (currently version 120.0). I was looking through the settings on 121.0 beta Firefox Beta November 21, 2023 and saw it has the very useful Cookie Banner Blocker: When a site asks if they can use cookies in private browsing mode, Firefox Developer Edition automatically refuses for you. Only on supported sites.

According to the https://support.mozilla.org/en-US/kb/cookie-banner-reduction?as=u&utm_source=inproduct this was introduced in Firefox version 120. However I do not see it in my regular Firefox 120.0. Both browsers say that "Your browser is being managed by your organization." I can change the proxy settings in regular Firefox 120, but not in Firefox Developer beta 121. Although both have the same sentinelone 2023.1.4.650 extension set.

Hi, I just discovered something odd. Trying to troubleshoot something with an android app communicating via web and laptop to free up the phone, and the relevant website has a chat popup and Firefox won't open the popup. I added the website to the whitelist and saved, but still wouldn't. Tried troubleshooting mode, but nothing. Switched to Chrome and it works fine. Cleared cookies and cache and restarted Firefox, but still no luck. The website is ExpressVPN.com. Macbook Pro OS10.14, Firefox up to date, version 115.1.0esr (64-bit).

When I have to change a setting on my LAN printer, an HP, I should be able to access its built-in settings module. Firefox will not let me access the printer because it doesn't have a trusted certificate.

So I get a blank page with the message: "we could not verify the certificate: reason = untrusted" and doesn't give me any options. In versions past, I recall an option to connect anyway if I trusted the site.

If there is a setting that lets me enable the option to continue anyway, where is it? Alternately, is there an exception list, perhaps by IP address, that will allow the browser to connect? Perhaps another solution?

I can't be the only one who is encountering this issue.

Thanks,

Ed

Secure Connection Failed

An error occurred during a connection to app. You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert.

Error code: SEC_ERROR_REUSED_ISSUER_AND_SERIAL

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem.

Mozilla's issue, as the Chrome is working perfect.

Certificate Dropa Sep 20, 2023, 8:55:35 AM

You don't indicate what or where this certificate is coming from for any forum user to know what is happening or why it's not being recognized by the browser.

I've been using Firefox for years, and I don't remember ever having a password, but it asked me for one when I set up a new Operating System. So it wanted my email addy, and I gave them the password for that addy. They wouldn't accept it. Then I created a new password, and now it shows too many dots for the password I created. I'm really confused now. Already they have sent me 8 different "Account Authorization Codes." I have no idea what is going on now, and I don't know if the password I created is the one that they now have because there is no "eye" to show me what they think that my password is. Like I said, they are showing too many dots, and there is no way for me to find out what they think my password is!

I checked the box in privacy settings to "Block new requests asking to allow notifications". But I am constantly asked by multiple web sites if I will allow them to send me notifications. I despise the very idea of push notifications and will never use them or allow them. If this option in settings does not work, then why is it there? Is there a way to make the browser impervious to push notification requests?

Hi Folks,

"Block pop-up windows" is enabled in Firefox, but I still get popups from www.smh.com.au Maybe you have time to investigate - a different type of popup needs blocking.

Sample page https://www.smh.com.au/politics/federal/inflation-tipped-to-fall-while-rent-costs-to-buck-trend-with-15-year-high-20230721-p5dqbj.html

Thanks