Komunitné fórum Firefox

To whom it may concern,

I have an angular application accessing data from a 3rd party data provider. To get data, POST-requests are sent to the data provider REST API (https://capzlog.aero). The application works correctly using Google Chrome and Microsoft Edge. However, when using Firefox, the following error appears:

"Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs. (Reason: CORS request did not succeed). Status code: (null)."

As the POST request contains basic authentication, a preflight-request (OPTIONS) is first sent to the data provider. This request fails when using Firefox (but not when using Chrome or Edge), see attached screen-shots.

I have spent 4 days on the internet trying to figure out a solution, but I could not solve the issue. I tried the following: 1) check the certificates of the 3rd party provider (https://capzlog.aero): There are no issues. 2) start Firefox in safe-mode, disactivating the "Enhanced Tracking Protecting", clearing the cache. 3) changing the following Firefox settings:

   security.enterprise_roots.enabled (true<->false)
   security.tls.version.min (1<->3)
   security.tls.version.max (2<->4)
   network.http.network-changed.timeout

I tried sending the "OPTIONS"-request using curl and it worked as expected:

curl --verbose -XOPTIONS -H "Access-Control-Request-Method: POST" -H "Origin: https://projectz.numericalsolutions.ch" https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs

• Host capzlog.aero:443 was resolved.
• IPv6: (none)
• IPv4: 156.67.9.80
• Trying 156.67.9.80:443...
• Connected to capzlog.aero (156.67.9.80) port 443
• ALPN: curl offers h2,http/1.1
• TLSv1.3 (OUT), TLS handshake, Client hello (1):
• TLSv1.3 (IN), TLS handshake, Server hello (2):
• TLSv1.2 (IN), TLS handshake, Certificate (11):
• TLSv1.2 (IN), TLS handshake, Server key exchange (12):
• TLSv1.2 (IN), TLS handshake, Server finished (14):
• TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
• TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
• TLSv1.2 (OUT), TLS handshake, Finished (20):
• TLSv1.2 (IN), TLS handshake, Finished (20):
• SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / secp384r1 / rsaEncryption
• ALPN: server accepted h2
• Server certificate:
• subject: CN=capzlog.aero
• start date: Dec 31 10:14:59 2024 GMT
• expire date: Mar 31 10:14:58 2025 GMT
• subjectAltName: host "capzlog.aero" matched cert's "capzlog.aero"
• issuer: C=US; O=Let's Encrypt; CN=R10
• SSL certificate verify ok.
• Certificate level 0: Public key type RSA (3072/128 Bits/secBits), signed using sha256WithRSAEncryption
• Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
• Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
• using HTTP/2
• [HTTP/2] [1] OPENED stream for https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs
• [HTTP/2] [1] [:method: OPTIONS]
• [HTTP/2] [1] [:scheme: https]
• [HTTP/2] [1] [:authority: capzlog.aero]
• [HTTP/2] [1] [:path: /api/pel/public/externalsystemflights/GetMissingIDs]
• [HTTP/2] [1] [user-agent: curl/8.6.0]
• [HTTP/2] [1] [accept: */*]
• [HTTP/2] [1] [access-control-request-method: POST]
• [HTTP/2] [1] [origin: https://projectz.numericalsolutions.ch]

> OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs HTTP/2 > Host: capzlog.aero > User-Agent: curl/8.6.0 > Accept: */* > Access-Control-Request-Method: POST > Origin: https://projectz.numericalsolutions.ch > < HTTP/2 204 < cache-control: private < server: Microsoft-IIS/10.0 < access-control-allow-origin: https://projectz.numericalsolutions.ch < access-control-allow-credentials: true < x-aspnet-version: 4.0.30319 < x-powered-by: ASP.NET < date: Thu, 16 Jan 2025 07:12:32 GMT <

• HTTP/2 stream 1 was not closed cleanly: HTTP_1_1_REQUIRED (err 13)
• Downgrades to HTTP/1.1
• Connection #0 to host capzlog.aero left intact
• Issue another request to this URL: 'https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs'
• Found bundle for host: 0x55ecfa0a46e0 [can multiplex]
• Hostname capzlog.aero was found in DNS cache
• Trying 156.67.9.80:443...
• Connected to capzlog.aero (156.67.9.80) port 443
• ALPN: curl offers http/1.1
• SSL reusing session ID
• TLSv1.3 (OUT), TLS handshake, Client hello (1):
• TLSv1.3 (IN), TLS handshake, Server hello (2):
• TLSv1.2 (IN), TLS handshake, Finished (20):
• TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
• TLSv1.2 (OUT), TLS handshake, Finished (20):
• SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / secp384r1 / UNDEF
• ALPN: server accepted http/1.1
• Server certificate:
• subject: CN=capzlog.aero
• start date: Dec 31 10:14:59 2024 GMT
• expire date: Mar 31 10:14:58 2025 GMT
• subjectAltName: host "capzlog.aero" matched cert's "capzlog.aero"
• issuer: C=US; O=Let's Encrypt; CN=R10
• SSL certificate verify ok.
• using HTTP/1.x

> OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs HTTP/1.1 > Host: capzlog.aero > User-Agent: curl/8.6.0 > Accept: */* > Access-Control-Request-Method: POST > Origin: https://projectz.numericalsolutions.ch > < HTTP/1.1 204 No Content < Cache-Control: private < Transfer-Encoding: chunked < Server: Microsoft-IIS/10.0 < Access-Control-Allow-Origin: https://projectz.numericalsolutions.ch < Access-Control-Allow-Credentials: true < X-AspNet-Version: 4.0.30319 < X-Powered-By: ASP.NET < Date: Thu, 16 Jan 2025 07:12:32 GMT <

• Connection #1 to host capzlog.aero left intact

Here, a comparison of the "OPTIONS"-HTTP-request as sent by Chrome and by Firefox:

CHROME OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9a comparison of the "OPTIONS"-HTTP-request as sent by Chrome and by Firefox: Access-Control-Request-Headers: authorization,content-type Access-Control-Request-Method: POST Connection: keep-alive Host: capzlog.aero Origin: https://projectz.numericalsolutions.ch Referer: https://projectz.numericalsolutions.ch/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36

FIREFOX OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs undefined Host: capzlog.aero User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: */* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br, zstd Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Referer: https://projectz.numericalsolutions.ch/ Origin: https://projectz.numericalsolutions.ch Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Priority: u=4 TE: trailers

And the response header as seen by Chrome:

CHROME HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Language: en Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://projectz.numericalsolutions.ch Access-Control-Allow-Credentials: true Set-Cookie: AppSettings=Culture=en-US&Language=English&CountryAlpha2=CH; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure; SameSite=Lax X-Powered-By: ASP.NET Date: Thu, 16 Jan 2025 07:19:59 GMT Content-Length: 2

Here, a comparison of the Network Traffic as seen for Chrome and for Firefox:

CHROME 17:07:46.550256 IP ANYPC.57562 > 156.67.9.80.https: Flags [P.], seq 1480736564:1480737180, ack 2430285572, win 501, length 616 17:07:46.557654 IP 156.67.9.80.https > ANYPC.57562: Flags [P.], seq 1:393, ack 616, win 8212, length 392 17:07:46.557654 IP 156.67.9.80.https > ANYPC.57562: Flags [P.], seq 393:427, ack 616, win 8212, length 34 17:07:46.557683 IP ANYPC.57562 > 156.67.9.80.https: Flags [.], ack 393, win 501, length 0 17:07:46.557688 IP ANYPC.57562 > 156.67.9.80.https: Flags [.], ack 427, win 501, length 0 17:07:46.558334 IP ANYPC.57562 > 156.67.9.80.https: Flags [F.], seq 616, ack 427, win 501, length 0 17:07:46.558741 IP ANYPC.42786 > 156.67.9.80.https: Flags [S], seq 2926210792, win 64240, options [mss 1460,sackOK,TS val 2936933242 ecr 0,nop,wscale 7], length 0 17:07:46.562927 IP 156.67.9.80.https > ANYPC.57562: Flags [F.], seq 427, ack 617, win 8212, length 0 17:07:46.562962 IP ANYPC.57562 > 156.67.9.80.https: Flags [.], ack 428, win 501, length 0 17:07:46.563492 IP 156.67.9.80.https > ANYPC.42786: Flags [S.], seq 1974100572, ack 2926210793, win 65535, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 17:07:46.563514 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 1, win 502, length 0 17:07:46.565558 IP ANYPC.42786 > 156.67.9.80.https: Flags [P.], seq 1:1743, ack 1, win 502, length 1742 17:07:46.572094 IP 156.67.9.80.https > ANYPC.42786: Flags [.], ack 1743, win 8212, length 0 17:07:46.572094 IP 156.67.9.80.https > ANYPC.42786: Flags [P.], seq 1:161, ack 1743, win 8212, length 160 17:07:46.572133 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 161, win 501, length 0 17:07:46.572276 IP ANYPC.42786 > 156.67.9.80.https: Flags [P.], seq 1743:1794, ack 161, win 501, length 51 17:07:46.572421 IP ANYPC.42786 > 156.67.9.80.https: Flags [P.], seq 1794:3197, ack 161, win 501, length 1403 17:07:46.583942 IP 156.67.9.80.https > ANYPC.42786: Flags [.], ack 3197, win 8206, length 0 17:07:46.710020 IP 156.67.9.80.https > ANYPC.42786: Flags [P.], seq 161:638, ack 3197, win 8206, length 477 17:07:46.751327 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 638, win 501, length 0 17:07:46.754201 IP 156.67.9.80.https > ANYPC.42786: Flags [P.], seq 161:638, ack 3197, win 8206, length 477 17:07:46.754231 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 638, win 501, options [nop,nop,sack 1 {161:638}], length 0$

FIREFOX 17:08:28.962851 IP ANYPC.35980 > 156.67.9.80.https: Flags [S], seq 2319755284, win 64240, options [mss 1460,sackOK,TS val 2936975646 ecr 0,nop,wscale 7], length 0 17:08:28.972248 IP 156.67.9.80.https > ANYPC.35980: Flags [S.], seq 1053801102, ack 2319755285, win 65535, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 17:08:28.972330 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 1, win 502, length 0 17:08:28.974266 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 1:1894, ack 1, win 502, length 1893 17:08:28.987389 IP 156.67.9.80.https > ANYPC.35980: Flags [.], ack 1894, win 1026, length 0 17:08:28.987433 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 2921:3937, ack 1894, win 1026, length 1016 17:08:28.987461 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 1, win 502, options [nop,nop,sack 1 {2921:3937}], length 0 17:08:28.987598 IP 156.67.9.80.https > ANYPC.35980: Flags [.], seq 1:1461, ack 1894, win 1026, length 1460 17:08:28.987647 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 1461, win 524, options [nop,nop,sack 1 {2921:3937}], length 0 17:08:28.987682 IP 156.67.9.80.https > ANYPC.35980: Flags [.], seq 1461:2921, ack 1894, win 1026, length 1460 17:08:28.987707 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 3937, win 547, length 0 17:08:28.994553 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 1894:2052, ack 3937, win 547, length 158 17:08:29.005007 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 3937:3988, ack 2052, win 1025, length 51 17:08:29.005007 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 3988:4057, ack 2052, win 1025, length 69 17:08:29.005700 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 4057, win 547, length 0 17:08:29.006086 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 2052:2151, ack 4057, win 547, length 99 17:08:29.006123 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 2151:2577, ack 4057, win 547, length 426 17:08:29.008948 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 2577:2615, ack 4057, win 547, length 38 17:08:29.018116 IP 156.67.9.80.https > ANYPC.35980: Flags [.], ack 2615, win 1023, length 0 17:08:29.018116 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 4057:4095, ack 2615, win 1023, length 38 17:08:29.024518 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 4095:4322, ack 2615, win 1023, length 227 17:08:29.024518 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 4322:4364, ack 2615, win 1023, length 42 17:08:29.024943 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 4364, win 570, length 0 17:08:35.342337 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 1974101210, win 501, length 0 17:08:35.349317 IP 156.67.9.80.https > ANYPC.42786: Flags [.], ack 1, win 8206, length 0

I really do not know what to do anymore to solve that problem.

As the problem is impacting hundreds of users, I really hope there is a solution.

In advance thanks for your help.

I am using Firefox 128.5.0esr (64-bit) on Debian 12. This is the browser that comes installed with the system. Recently, an offline translation feature was added to Firefox. In settings, you can download various languages. I would like to know where language models for offline translation are stored. The downloaded languages I want to copy to another computer without internet connection so that I can use the offline translation on this computer.

Hello to all,

I wanted to use DoH (dnsforge.de) under “maximum protection”, but with one exception: I would like Ecosia.org to be able to place ads for me, because I am convinced of Ecosia and want to support this project. Tested this with Cloudflare as well, setting up an exception here does not work either.

Now the exception set in Firefox has no effect. It should not be due to the DNS provider, because Ecosia.org is not blocked and has even been whitelisted.

What is the expected behavior of the “maximum protection” setting?

Kind regards

So, I'm trying to sign in to D&D Beyond with my google account. It works fine on my phone but when I try to do it on my desktop it just endlessly loads. I've already tried turning my pc off and on again and clearing cookies. Has anyone else had a similar problem.

I have two computers. Both sign into the same Firefox account. Both instances of Firefox are the same version (134.0.1 64-bit).

On my main computer, creating a new tab is set to Firefox Home (default), and clicking the "+" sign to create a new tab results in the recommendations appearing as seen in the first image (firefox_2025-01-19_17-42-57.png)

On the other computer, creating a new tab is set to Firefox Home (default), and clicking the "+" sign to create a new tab results in the recommendations appearing as seen in the second image (firefox_2025-01-19_17-43-57.png)

How to I get both instances of Firefox to do the same thing when creating a new tab, i.e. organize the recommendations like the second image?

Firefox is no longer saving all my history. OR, I can't find it. I can't find it because: HISTORY/SHOW ALL HISTORY is now only showing "today". This occurred with v133, but I do not know if it occurred with any given update. I updated to 134.0.1. That did not fix problem. I have not tried regressing.

In the past, I was able to save YEARS of history (although I sometimes created a new profile to restart the history file due to its size).

1. I was using the "DYNAMIC HISTORY" addon, which worked fine for years. When I found Firefox was showing only the current days' history, I disabled that addon. Didn't fix anything.

2. "Delete cookies and site data when Firefox is closed" option IS NOT SELECTED. NEVER HAS BEEN

3. OTHER SETTINGS: no - Always use private browsing mode yes - Remember browsing and download history yes - Remember search and form history NO - Clear history when Firefox closes

any suggestions or help would be greatly appreciated. I am also baffled: googling this problem comes up empty handed.

.

As far as I can tell from reading the help pages, the Firefox translation feature should automatically translate any page in any available language, unless explicitly set not to do so. However, I observe that no translation occurs unless I first select text, right click, and select translate, and even then, the translation is presented as unformatted text in a separate dialog box, which is not much better than copying and pasting web pages into some other translator service. Am I missing something here?

Sadly, this is not even close to being competitive with the Google Translate level of functionality. I use Google Translate every day to read package labels in grocery stores, road signs, and a host of other written sources of information. Occasionally, I even use it to hold conversations with people I would not otherwise be able to talk to. So far, I am nearly monolingual, and I am unwilling to do without this; I probably wouldn't travel if it were not available. It does tie me to that fraction of the surface area of the earth where high speed internet access is generally available, but I don't really need to go any places where it is not; I am not trying to hike across Antarctica. I understand that there is a loss of privacy when dealing with Google, but I do whatever I can to fend that off, and the value of the free services I receive in exchange is huge. What's the future of Firefox in this respect?

I got a Firefox update recently and have not been able to access Flickr since then. I am getting a message that the page is not redirecting correctly. I am attaching the error message. I am running with standard firefox protection. I have cleared cache and cookies. I have also added Flickr as an exception to Firefox enhanced privacy tracking. Firefox is up to date (version 134.0.1 (64 bit)). Anyone else having this issue or know the solution?

I am a Cacti developer and we are considering switching from FontAwesome Web Fonts to Tabler Web Fonts. However, on Firefox for Windows only, we are having a major slowdown when using the Tabler SVG based webfonts. The page load is first stalled by Firefox apparently loading all the Web Fonts, which would appear normal with any browser (though exceedingly slow on Firefox for some reason).

However, once the page is loaded, when going off tab to another browser tab, and then back to the Firefox tab that includes the Tabler webfonts, there is a 3 second delay before the tab switches. When we enable the performance analyzer, we find that the delay is almost 100% Reflow of the page, even though the page is static as this point (no changes) from the last time it was activated.

We do not have this issue on Firefox for Linux, MS Edge or any other Chromium browser, only Firefox on Windows. I'm using the latest version 134. Should I be opening a bug?

Computer: Lenovo Y70-70 laptop Phone: Motorola Edge+ 5G UW (2022) OS: Microsoft Windows 10 Home Firefox: Version 134.0.1 (64-bit)

When I awoke my laptop from sleep this morning, the opened Mercari tab did not load correctly, forcing me to log out and attempt to reset it. It acted as if I was not logged in to begin with and would not load the correct account information. When I logged out and then attempted to log back in, I was given an error that stated that the password or account was incorrect. I contacted Mercari Support for assistance, first, as I could not log into my account on an Edge browser, either. When I opened a Chrome browser, it auto-logged me in without issue. Mercari support assisted me for close to 13 hours, and eventually changed my email address associated with my account. Unfortunately, after that, I still could not get logged in, still getting the same wrong password or account message on my laptop. HOWEVER, when I opened firefox on my phone and attempted to log in there, it worked, using the same account and password information as I had attempted on my laptop. Additionally, I was able to log into my Mercari app on my phone, as well as BOTH Chrome and Edge on my laptop. It is only Firefox on my laptop which is not accepting the correct information. I have cleared my cache on firefox, which did not work. I have done an end task on Firefox on my laptop and restarted it, which did not work. I have restarted my laptop, which did not work. I power cycled my T-mobile router, which did not work. I even connected to the internet via hot-spot through my motorola phone, which also did not work. I can log into Mercari on any other way that I attempt, using the same account and password, EXCEPT for Firefox on my Lenovo. Firefox claims that it is up to date and will not find a newer update. Nothing was altered, to my knowledge, between putting my laptop to sleep last night and waking it up this morning. No updates, power interruptions, or anything that I am aware of. I am at my wit's end and am out of ideas for things to try to fix this. Please help. I do NOT want to have to run Chrome again, just to be able to log into a single page on my laptop.

Secure Connection Failed

An error occurred during a connection to myiphide.com. PR_CONNECT_RESET_ERROR

Error code: PR_CONNECT_RESET_ERROR

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem

• I saved the link, "https://www.papeg.ai"
• Now, I cannot archive or delete the link. I also cannot edit the assigned tags.
• Basically, the link is frozen.
• I would very much like to remove the link from my saves.
• Any help or information would be appreciated.

Dear Sir,

Firefox is not working with Rabby Wallet and Metamask extensions.

It does no pop-up the window to see the transaction and sign it. Firefox 134.0.1 (64-bit). Windows 10 Home.

On Metamask at least I can click on the pinned extension and see the window. However it´s not the expected behavior, because it should open the pop-up automatically. With Rabby wallet it is impossible to proceed, even clicking on the extension icon.

Please fix it.

So i am using ReseourceOverride AddOn to debug a js library on standard install of firefox. This works by using the site as normal but resource override has instruction to replace request for the library on server with one requesting it from localhost. This used to work without problems. However today i noticed that breakpoints aren't getting hit. I have downgraded to version 132.0.2 and breakpoints work once again. I think this has something to do with debug sources, since the load process adds 2 sources, webpack containing uncompiled code and where i set break points, and webpack-internal which i think is built js library before getting minified. Links to exceptions in console also dont work instead of linking to webpack seemlesly, the adress says webpack-internal and link open a new window and complains that the adress is nonsense (see attached images)

Thatnks for the help