All Products Community Forum

We use a privacy technology vendor named OneTrust to power much of our privacy infrastructure.

This morning, two websites reported Firefox users are encountering site functionality problems when trying to exercise their privacy rights, such as opting out of sharing data and targeted advertising. My team investigated and was able to reproduce the reported bug.

We discovered the cause of the bug is that Firefox's Privacy Enhanced Mode is by default blocking two domains from our privacy vendor OneTrust which are critical to the functioning of our CMP (Consent Management Platform): - cookielaw.org - onetrust.com

These two domains are used solely for the essential services needed to run our privacy software. They're not used for marketing, sales, or advertising. Blocking them not only causes site functionality issues it keeps our users from being able to exercise their privacy rights.

I've attached two screenshots here showing the network calls and domains.

Can Mozilla please quickly review this bug and remove these two domains from the blocklist powering Privacy Enhanced Mode?

I want to create a list of allowed web sites in settings/cookies&data/manage exceptions, but it seems I have to enter each site MANUALLY. I would like to do this more quickly and easily by just selecting sites in the "manage cookies" list and designating them as exceptions. Or is there already some other way to do this that I haven't found? Also, after I have made exceptions for all my important sites, by whatever means, can I assume that I can press "delete all" in the "manage cookies" list and the allowed sites will not have cookies removed? What happens to exceptions if I select "delete cookies and site data when Firefox is closed?" If there is no way to make exceptions other than manually, I respectively request that some convenient method be added to the program. Thanks for any response.

I have rice to live no one has the right to threaten my life with black magic triangles the cloud Microsoft Google and Moselle I see you in court I have a power of attorney and a lawyer tomorrow about time I have the biggest story in the Bay area I'll have much time to tell my story but God gave me this time to tell it Michael thank you for doing me the way you done me you two Alabama YouTube cat with a k Robert you too Denise Kim especially you my family I can't see the serpents in my head I'm a whole body snake somebody better get something to cure me and I mean fast I got daggers in my heart fix it fix it share my data share s*** cement took my cement synonym

Hello, VER: 128.3.0esr (64-bit)

Since I have updated to the newest version of TB, it is now a continiuous issue with "Not Responding". This is happening on three different computers with my mail accounts. I am using Godaddy (IMAP) as my mail service, and they now use Office 365. I did read in a post to add my profile to my firewall exlusion. This did seem to solve my issue, but I have since removed it as I am not sure it is safe. Is there any safety issue adding the profile to the firewall exclude.

Thank you, JR

Hello: t-bird 128.3.0 esr 64bit. W11pro laptop (dell). MalwareBytes Team up & running & up to date, many yrs. Problem: an attachment, which I tried to completely remove, keeps "coming back" in emails, in a specific inbox (only 1 inbox, of 1 acct). Other t-bird mail accts do NOT have this issue. -The "coming back" means that I delete the attachment and empty the t-bird trash. The attachment then plants itself in another email. -Once planted in an email, it appears the attachment completely erases the body of the text of the body of the email. -The attachment, when opened, is an image of a family. That is it. It is not of any family we know. It is always the same family. -I "found" the attachment (using a search program) by name, "img_2068.jpg" . Deleted what I thought were all occurrences of this file on the laptop, which were only 2 files, both in temp folders. I deleted all temp files from the laptop, emptying the w11 trash & also running w11 file deletion apps. Malwarebytes has never detected this corrupt image file. -After making all those deletions, I ran the search and the search prog did not detect the file. But I reopened t-bird and the corrupt attachment has attached itself to another email, and the same behavior recurs (I delete attachment, corrupt attachment attaches itself to another email).

-Also please note, the emails that had the corrupt attachment attached (have been previously not having any attachments), do exist on the mail server (imap), where you can see the the message body/text. And again, once the corrupt attachment infects an email, in t-bird, that email's body/text goes blank, there is no longer any message to be seen. There is just the attachment notice at the bottom of the email border, to be clicked on to open.

Is the only solution to completely back up all the t-bird accts (address books, sent, drafts, etc.) and reinstall t-bird program (and/or profiles) ? Or, would an "easier" way work (or has worked), like simply deleting the inbox of the "infected" account? I would then download the uncorrupted emails from the imap server in a new inbox. But I don't know where to find this corrupt file, there is apparently no "attachments" folder for t-bird. And again, searching by corrupted attachment file name, and removing it as above, has apparently NOT removed all instances. I don't know how else to find it.

Please advise. Thank you.

Running Thunderbird 128.2.3esr under Windows 10, I just noticed something for the first time. I sent a broadcast message to myself, but included four friends under Bcc:. When I got my own copy of the email, from the address on the To: line, I see that the Bcc: list is visible, as shown in the attached image. Is this JUST on my received copy of the message, or is everyone's name 'in the clear?'

Thinking that my outgoing message might have been cached-and-used or something, I went into my Gmail Web account and looked at the message as received by Google's servers. Sure enough, the 'blind' (ostensibly hidden!) names show up there as well, so I'm assuming that the Bcc: function may not be doing its job. Either that, or the primary (To:) recipient sees the Bcc: list in the clear, and listed Bcc: recipients won't, although I don't recall Thunderbird working this way in the past. But if it does, that's okay, just that Windows Live Mail, my previous client, didn't.

Hello. I bought the Williamston Inn. The old website was at Squarespace. I hired a new company to create a new website. I thought everything was going to seamlessly transfer...LOL. I then canceled and transferred hosting to GoDaddy. I have an issue only with Firefox where it says SEC Certificate Revoked. I am somewhat tech savvy, but this has me stumped. I have cleared cookies, history, cache and even asked both the Logo House and GoDaddy for ideas. Please help.

Hi,

Recently, I have noticed that when using Firefox, if I try to view an embedded YouTube video on sites that I visit regularly, instead of the embedded video playing, I now get a message on the video window that says, "Sign-in to confirm you are not a Bot. However, there is no option to 'sign-in', so I am not able to view the video. (screenshot attached)''

I did a little testing and discovered 2 things which I thought were noteworthy:

1) If I turned-off my VPN (Norton), then the embedded video plays in Firefox without any issues.

2) If I access the same site within the Chrome browser then the embedded video play regardless of whether I have the VPN service On or Off.

Strange, but true !!

I cannot find any Firefox Settings that address this issue.

Any clues?

Thanks.

Why are we still deluding ourselves that Firefox is a competitor to Chrome, when it's really Google's weapon against competition itself?

Mozilla is not a rights activist. It's a Surveillance Valley theatre group renting its brand names, spyware and lobbying capacity to Google on pain of death. The whole idea that Firefox is a last bastion of light in the fight against monopoly is a joke. But we're so neck-deep in monopoly that all we have left is that delusional fantasy.

I hope this reaches the core of Firefox.

Firefox version

   128.2.0esr (64-bit)

Operating system

   Windows 10/Windows11 23H2 Septembre patch

Hello everyone,

maybe you can tell me/explain what the problem could be.

In our company we had Firefox version 115.14.0esr (64-bit) and then we updated to 128.2.0esr (64-bit).

Since version 128.2 ESR we have experienced problems in Firefox when trying to access DNN+ pages (with login). https://www.dnn.de/sport/regional/dresdner-sc-denkt-ueber-uebernahme-der-margon-arena-nach-C3IC74MZ6FE43AKGCZJSKUXA3I.html

In Firefox the content is cut off, in Edge it is displayed normally.

With Edge and Firefox 115.14.0esr the page is displayed normally. No AdBlock installed.

In developer mode I see the errors in the versions, so it shouldn't be that.

Cross-source (cross-origin) request blocked: The same-source rule prohibits reading the external resource on https://gum.criteo.com/sid/json?origi...AAAAAAAA&gdpr=1. (Reason: CORS request failed). Status code: (null).

Cross-source (cross-origin) request blocked: The same-source rule prohibits reading the external resource on https://id5-sync.com/api/config/prebid. (Reason: CORS request failed). Status code: (null).

Any ideas? Thank you very much! :)

Hi, I have configured 2 accounts for E2EE using OpenPGP. I can send signed emails &/or encrypted messages between the 2 accounts. However, if I send a "normal" message i.e. no signing & no encryption selected, it arrives as not signed (correct), but encrypted according to the "Show message security" icon. If I send a normal message to an account that has no known encryption setup, then the message arrives and the "Show message security" button is missing (correctly).

Any ideas why this is happening? Thanks for your help.

I am on endeavourOS (linux). Whenever I try to upload images for a profile picture to sites like youtube or X, the image becomes corrupted and doesn't upload correctly. It did this with whatsapp too and I had to use a separate app for it. Other posts said that disabling "privacy.resistFingerprinting" would fix it, but it's already disabled.

Attached below are an example of this bug and the contents of this image when viewed on a text editor.

I am trying to add a password to the password manager for a specific URL like https://example.com/page. However after I save the password it save it to the address https://example.com and removes /page. Is there a way to change this?

Hello, I noticed that the Firefox Android app does not have a lock feature as the Google Chrome Android app does for private/incognito browsing. I feel as though this is a very useful feature that secures the icongnito tab in the google app so that I could leave the app and no one would be able to access the tabs other then me due to it requiring a fingerprint to open. Firefox seems like a good android app, I just wish that it had this feature.

Nord keeps telling me that Mozilla Thunderbird Version 128.0.1 Severity level : High. Exploiting this vulnerability is relatively straight forward for attackers. They may gain unauthorized access to your data or cause system disruptions. Risk mitigation is needed. This message was also for the latest 115 version. Then I updated to 128 and it has the same problem

My PEC mail sends me this error:

Sending username failed. The mail server mail.postecert.it responded: unsupported SASL authentication method

Can this be solved? Thanks