פורום התמיכה של Firefox

I'm a cybersecurity professional and I'm researching about Same Origin Policy, Cross Origin Resource Sharing and how firefox deal with those things. I've find out that versions before 102.1.0esr, cross-origin script GET requests used to attach cookies (Image 1), but in newer versions, it's not happening (Image 2). I checked the release notes but didn't find nothing about this change.

I would like to learn more about what changed and how Firefox is dealing with cookies, SOP and CORS.

Thanks!

Hello,

NOTICE: Currently using Firefox 120.0.1 "Update disabled by your system administrator" I am unable to update the browser, the computers are from the public library.

Like I state in the Subject, I configure the browser to strict privacy level, and I am able to visit any site I want. No problem. But on all of these, when I click the lock icon on the address bar I read "Connection verified by a certificate issuer that is not recognized by Mozilla." In fact, right now, I am visiting this website and I got that notice. View image "Firefox broser does not recognize the certificate issuer fortinet but I can visit the firefox suport website - Screenshot 2024-01-28 172732.png"

WOW... View the image "certificate issuer not recognized by Firefox - fortinet - when visiting support.firefox.com - Screenshot 2024-01-28 173041.png" for some of the info I get if I view more information about the certificate.

Then, after I logged out, the "Clear cookies and site data" link that appears after clicking the lock icon I mentioned before do not appear.

View the image "UNable to clear cookies and site data - proton.me - Screenshot 2024-01-28 141951 - edited.png"

In this same computer, I got the control "Clear cookies and site data." View image "able to clear cookies and site data - virustotal.com - Screenshot 2024-01-28 141825.png"

So more than one question:

I read other posts where users are unable to visit a website which has a certificate issued by an issuer that is not recognized by Mozilla. Why am I able to visit these websites?

What can I expect of the non appearing "Clear cookies and site data" link I described before?

Are these computers like totally hacked?

CNN website being blocked. This notice comes up:'''' We apologize, but your web browser is configured in such a way that it is preventing this site from implementing required components that protect your privacy and allow you to view and change your privacy settings. This functionality is required for privacy legislation in your region.''''

Followed instructions on https://support.mozilla.org/en-US/questions/new/desktop/form and https://support.mozilla.org/en-US/kb/how-disable-enterprise-roots-preference "security.certerrors.mitm.auto_enable_enterprise_roots" is set to disabled but "security.enterprise_roots.enabled" is set to true but is greyed out and I do not have a toggle option to disable it - why and what is the solution ? No Anitvirus software except windows 11 defender is installed.

No "ImportEnterpriseRoots" entry available in registry and no HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\.... entry

Please help!

I would like to remain logged into google and youtube after i close firefox. After clearing my history once, i now get logged out every time i close firefox.

Please help :)

Kind regards,

Thomas Kunst