Firefox Support Forum

Below is the content-security-policy Firefox loads for chatGPT:

default-src 'self'; script-src 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'wasm-unsafe-eval' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; script-src-elem 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'sha256-RvbVrdDS11FSnQaULCOgXPA5u0nMP2Im1d2pGiRBGC4=' 'sha256-eMuh8xiwcX72rRYNAGENurQBAcH7kLlAUQcoOri3BIo=' auth0.openai.com challenges.cloudflare.com chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://apis.google.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://docs.google.com https://jidori.g1.internal.services.openai.org https://js.live.net/v7.2/OneDrive.js https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www-onepick-opensocial.googleusercontent.com wss://*.chatgpt.com wss://*.chatgpt.com/; img-src * 'self' blob: data: https: https://docs.google.com https://drive-thirdparty.googleusercontent.com https://ssl.gstatic.com; style-src 'self' 'unsafe-inline' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; font-src 'self' data: https://*.oaistatic.com https://fonts.gstatic.com; connect-src 'self' *.oaiusercontent.com api-iam.intercom.io api-js.mixpanel.com browser-intake-datadoghq.com chatgpt.com/ces fileserviceuploadsperm.blob.core.windows.net http://0.0.0.0:* http://localhost:* https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.onedrive.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://content.googleapis.com https://docs.google.com https://events.statsigapi.net https://featuregates.org https://graph.microsoft.com https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www.googleapis.com o33249.ingest.sentry.io statsigapi.net wss://*.chatgpt.com wss://*.chatgpt.com/ wss://*.intercom.io wss://*.webpubsub.azure.com; frame-src challenges.cloudflare.com https://*.sharepoint.com https://content.googleapis.com https://docs.google.com https://onedrive.live.com https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ js.stripe.com; worker-src 'self' blob:; media-src blob: 'self' *.oaiusercontent.com fileserviceuploadsperm.blob.core.windows.net https://cdn.openai.com https://persistent.oaistatic.com; frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj; report-to chatgpt-csp-new; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub1f79f8ac903a5872ae5f53026d20a77c&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=version%3Achatgpt-csp-new

Notice that it includes " frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj"

Would this extension be installed in the computer, kind of like the extensions that are loaded from Chrome (i.e., C:\Users\myUser\AppData\Local\Google\Chrome\User Data\extensions_crx_cache)?

Thanx

Today all of the sudden, one of my computers running Firefox won't connect to Youtube at all. It says security issue with HSTS. It also says there there is nothing I can do to resolve it. Surely that can't be true. Youtube runs on every other computer in the office just fine.

Here is a screen capture of the message:

When I go to Settings > Privacy & Security the only "autofill" setting is to import data from another browser. I am signed in, in the US, and my VPN is set to Seattle.

Hello,

I noticed something strange on my account under my password manager and want to make sure it is not a security issue.

Under my Password Manager, I noticed that a majority of my saved passwords (unless used recently) all have the last "used" date as April 5, 2024. These are on accounts that I do not access frequently and they all have the same "used" date.

Why would this be the case?

Thank you so much, Brianna

Hello,

I have tried to find solutions to this and have not found anything to be a permanent fix. I recently have found my FireFox browser closing my first attempt to open and upon opening my second attempt Firefox will open but give me a pink address bar with a robot stating "browser is under remote control (reason: Dev Tools)" and the only thing that seems to get rid of this temporarily is going to my control panel (I'm a windows user) and toggling the remote assistance checkbox (I keep it unchecked since this problem has occurred). Then after re-opening Firefox again, it appears to work normally - no pink address bar with robot. Is there a permanent fix for this? Is it an OS issue or a Firefox issue? Maybe both? Any insight would be greatly appreciated. I am fairly tech savvy, but not too familiar with browser interfaces and solutions involving the command line.

Thank you,

as you can see in the screenshot it says the mic is only"allowed temporarily" and when i go to permissions it doesn't let me add a site to grant perms i can just search for sites and thats it. its annoying cuz on textnow i have to keep granting perms

I cannot access grocery coupons from Ralphs Market. When I try, I receive the message: Secure Connection Failed

An error occurred during a connection to www.ralphs.com. The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem.

For months, now, whenever I try to post a comment on a Yahoo! News article, it reads: "Your comment has failed to published." This only happens in Firefox. My "Privacy & Security" settings are set to "Standard," my "History" set to "use custom settings for history" with settings "Remember browsing and download history" and "Clear history when Firefox closes." so cookies and cache get cleared then.

Sometimes this works when starting a new session. But I shouldn't have to start another session and lose all of my logins just to post a comment on a Yahoo News article.

Anyone else having this problem? Is there an easy and permanent fix? What are you settings set at?

I have two questions regarding the usage of a private window. I am using 126.0.1 on a mac desktop (and laptop) using 13.6.7 ventura. Long time user of firefox, but new to private windows.

1) I am using a popup blocker on firefox (UBlock Origin). Its icon shows on the browser window, but in a private window the icon disappears and I am getting popups. Do pop up blockers work in a private window? Is there a setting for that? 2) on my main browser Firefox home page I have 4 rows of shortcuts. On a private window home page there are none, and no settings icon to address this. Are shortcuts allowed on a private window home page and, if so, how to add?

Thanks

Why is firefox not showing up in my authenticator app???

I saw a previous post that has since been closed suggesting the solution be disabling 2FA authentication - with all due respect to whoever suggested that, I don't think that should be the best solution. I'd like to keep 2FA enabled. I'd just like to know why Firefox doesn't appear in my Google or Microsoft Authenticator apps. I end up having to use recovery codes which makes the process a pain.

I keep getting prompted to sign into my Firefox account, but when I type my password and hit enter, the prompt clears out my password and nothing happens. I'm already logged in to post this question, so I'm confused as to why I keep getting prompted.

I've tried:

1. Numbered list item Removing the account, but the same unresponsive password prompt shows up
2. Numbered list item Reinstalling, but same issue
3. Numbered list item Resetting password, but same issue

Potentially related: I am successfully logged into my Firefox account on another laptop, and I'm seeing no prompts there. Any ideas what else to try?

Hello,

My password saved are deleted every time I close FF. It used to be manageable because Google and other sites didn't require me to fill my passwords (cookies did the trick I suppose) but now I also loose access to gmail and Youtube every time I close FF. It's annoying to have to use 2FA every damn time. And keeping the passwords available.

I've tried every answer I found by looking around :

- tried to start in safe mode - disable hardware acceleration - I have no extensions

FF saves the passwords correctly (at least they appear in the saved password tab) but they are erased every time I restart FF. The cookies aren't automatically deleted (FF remembers my browsing history) but I need to relog into Google.

I getting frustrated.

For about 24hr now, every time I clear cookies and cache data, 20kB remain. I clear this data often, and the cookie and cache data always registers "0kB" after I click on "Clear Data", until yesterday. My OS is Ubuntu 22.04. Where can I find that file so I can delete it?