Firefox Community Forum

Hello, Firefox randomly downloaded a file, with seemingly randomly name, that is 0 bytes and in download manager the source is moz-safe-about. It happened when I was accessing a popular wiki site. I opened the file in notepad, it was empty. I put it on virus total and came back negative, as it is an empty file. I've curbed through the support tickets here, using the keyphrase 'moz-safe-about'. I understand this was/is quite a common problem, but it still makes me quite worried and left a sour taste in my mouth, as I haven't understood any of the explanations. I have enabled firefox to ask me whenever it wants to save something (I have no idea why this isnt the default state). Happened on a somewhat fresh, updated win 11 installation. I'm also attaching more information here with a picture. Long story short: should I be worried? Am I overreacting and this is just some sort of a bug that occurred while getting a sites data? Thank you for your time.

Below is the content-security-policy Firefox loads for chatGPT:

default-src 'self'; script-src 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'wasm-unsafe-eval' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; script-src-elem 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'sha256-RvbVrdDS11FSnQaULCOgXPA5u0nMP2Im1d2pGiRBGC4=' 'sha256-eMuh8xiwcX72rRYNAGENurQBAcH7kLlAUQcoOri3BIo=' auth0.openai.com challenges.cloudflare.com chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://apis.google.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://docs.google.com https://jidori.g1.internal.services.openai.org https://js.live.net/v7.2/OneDrive.js https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www-onepick-opensocial.googleusercontent.com wss://*.chatgpt.com wss://*.chatgpt.com/; img-src * 'self' blob: data: https: https://docs.google.com https://drive-thirdparty.googleusercontent.com https://ssl.gstatic.com; style-src 'self' 'unsafe-inline' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; font-src 'self' data: https://*.oaistatic.com https://fonts.gstatic.com; connect-src 'self' *.oaiusercontent.com api-iam.intercom.io api-js.mixpanel.com browser-intake-datadoghq.com chatgpt.com/ces fileserviceuploadsperm.blob.core.windows.net http://0.0.0.0:* http://localhost:* https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.onedrive.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://content.googleapis.com https://docs.google.com https://events.statsigapi.net https://featuregates.org https://graph.microsoft.com https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www.googleapis.com o33249.ingest.sentry.io statsigapi.net wss://*.chatgpt.com wss://*.chatgpt.com/ wss://*.intercom.io wss://*.webpubsub.azure.com; frame-src challenges.cloudflare.com https://*.sharepoint.com https://content.googleapis.com https://docs.google.com https://onedrive.live.com https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ js.stripe.com; worker-src 'self' blob:; media-src blob: 'self' *.oaiusercontent.com fileserviceuploadsperm.blob.core.windows.net https://cdn.openai.com https://persistent.oaistatic.com; frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj; report-to chatgpt-csp-new; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub1f79f8ac903a5872ae5f53026d20a77c&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=version%3Achatgpt-csp-new

Notice that it includes " frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj"

Would this extension be installed in the computer, kind of like the extensions that are loaded from Chrome (i.e., C:\Users\myUser\AppData\Local\Google\Chrome\User Data\extensions_crx_cache)?

Thanx

Hi,

Just the other day I started getting these popups from "anti virus service" that keeps popping up on my screen. I do not nor never did have McAfee on my system. I did a deep search, and there is no program on my computer, nor in my startups, nor in my popups allowed relating to this. It is only a problem with Firefox. Any solutions?

Thank you, John

I want to use the Advanced Preferences (about:config) to select 'Manual proxy configuration' setting. I have been able to set the HTTP Proxy and associated port but I am unable to find the setting in Advanced Preferences that will select Manual proxy configuration. Could someone please help. Thanks

When will the new version of Firefox fixing the PDF reader vulnerability be rolled out?

Unless there is some patch one needs to re-install a non-vulnerable version.

https://www.cisecurity.org/advisory/a-vulnerability-in-mozilla-pdfjs-could-allow-for-arbitrary-code-execution_2024-046

https://support.mozilla.org/en-US/questions/1333222

If I delete my history of the websites I go on is there a way to either restore it or store it some place else in case I want to see it at a future time? Can I also do it If I delete my emails and I would like to see certain emails, again in the future? I use mostly Yahoo and Gmail? I'm using Windows 10.

Thanks

We have an electronic document management system in our company. The system is an internal system without access to the LAN. Firefox detects files downloaded from it as potentially dangerous after the last update. Is there a way to prevent files from this website from being detected as potentially dangerous?

Malwarebytes www.malwarebytes.com

-Log Details- Protection Event Date: 12/05/2024 Protection Event Time: 10:52 Log File: 0728216c-103d-11ef-bf81-74e6e24e33e7.json

-Software Information- Version: 4.6.12.323 Components Version: 1.0.2309 Update Package Version: 1.0.84577 Licence: Premium

-System Information- OS: Windows 10 (Build 19045.4355) CPU: x64 File System: NTFS User: System

-Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data- Category: RiskWare Domain: zeewhaih.com IP Address: 139.45.197.245 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Firefox\firefox.exe

(end)

Should I be worried about this?

Thank you Dave

I have two questions regarding the usage of a private window. I am using 126.0.1 on a mac desktop (and laptop) using 13.6.7 ventura. Long time user of firefox, but new to private windows.

1) I am using a popup blocker on firefox (UBlock Origin). Its icon shows on the browser window, but in a private window the icon disappears and I am getting popups. Do pop up blockers work in a private window? Is there a setting for that? 2) on my main browser Firefox home page I have 4 rows of shortcuts. On a private window home page there are none, and no settings icon to address this. Are shortcuts allowed on a private window home page and, if so, how to add?

Thanks

Hello support staff. Here are the specifics ...

1. I installed undelete software from easeus.com 2. Uninstalled the above software 3. In Win10 Task manager under the Performance--Resource Monitor--Network option, saw firefox had a session opened with easeus.com

4. Windows defender shows nothing abnormal. 5. Removed all entries for easeus in registry. 6. Unistalled firefox and reinstalled it. 7. Start firefox and go to some site. 8. Firefox again has a open session with easeus.com in the Task manager.

9. Installed Chrome. No such session with easeus.com on Chrome under Task manager.

10. Issue at 3. pops up whenever I start firefox AND start browsing a site.

Help.

When logging into an account there are multiple usernames (incorrect or older.) I would like to remove or delete them, but keep the current passwords.

Is that possible without deleting the account?

Thank you, rldelahay

I have been dealing with https://www.mynylottery.org/portal/ for weeks trying to get their software to recognize my location, required to place subscriptions on their site. I have switched off every safety and restriction in settings to open the computer to their search for my location. I finally got them on the phone and they told me that for a reason they don't understand, Firefox is the only browser that is currently giving them problems. It refuses to allow them to pinpoint location of the connecting computer either via wi-fi or ethernet connection. Please provide some guidance and if necessary, contact the NYS lottery to solve the problem.

David Campbell

When I open Firefox and want to go to Private. I go to the three lines at the top right of the Firefox page. I go down to Private. Then after selecting it, YET ANOTHER REGULAR FIREFOX PAGE OPENS. I NEVER had this problem until the start of 2024.

Please help as I used to have FIREFOX PRIVATE as my go to browser. Now, I use others and they do not work with some pages.

Please help as it is frustrating to keep getting a new Regular page.

Integration from password managers are being blocked by Firefox because Mozilla believes something is critical to protect when trying to access their servers ( account.firefox.com )

Why?

Additionally, there is a work around, with removing ALL entries for the extensions.webextensions.restrictedDomains config flag. But why does Mozilla think they are so important that extensions shouldn't use them?

My Firefox browser did not update with daylight savings (this is my first time being in a country with daylight savings with this PC) and now all in-browser times are an hour behind, which is already really confusing for someone experiencing daylight savings for the first time. Now that I do not have a phone, this went from mildly annoying to really messing up my day-to-day life. As a result, I researched, found and followed this question-and-answer proposed solution to my issue but it didn't work. Now, I've been pushed a step backward because I have also lost the ability to view TV shows and movies on third party websites because the player will not load and a 'Website will not allow Firefox to display the page if another site has embedded it' notice will pop up (image for reference). This is super infuriating due to the fact that my PC is older and genuinely cannot run any kind of chromium browser and Firefox is the only way I can access said third party sites. It would be wonderful is anyone had a solution for both issues; thank you!