Diễn đàn hỗ trợ Firefox

Recently I have been unable to log into Reddit. Firefox is up to date, cookies and cache has been cleared, ublock origin has been disabled, still doesn't work. I can click 'Log In', enter my username and password, and then it is impossible for me to click the Log In button to advance. Left clicking the button, pressing enter, pressing tab until it is highlighted then pressing space, none of these work. I can open Edge and log in no problem. What do I need to do to fix this?

I prefer the tabs be below the bookmark bar, and successfully modified the CSS file to do this some time back. Now update 133 has once again pushed them up below the menu bar. What do I have to do to get them back where I want them this time? And why can't you just leave the tab location preference alone when doing updates?

Whenever I open up PDFs within the Firefox browser, they have a black background and the text and images do not appear. I can copy the text and images out of the pdf and into a word document and it works out fine. Also opening it up on other applications works out fine. Attached is what happens when I open up a known working pdf in Firefox. The browser version is the current version, 135.0.

In the last few days, the common Cloudflare widget required to login to many web sites has abruptly stopped functioning in my browser. I'm trying to diagnose what's caused it. I'd appreciate any suggestions or advice.

I noticed the issue on nexusmods.com, but I've confirmed it's a universal problem on ANY site that uses Cloudflare protection. I've continued to use Nexus as my test case.

Observed behavior: 1) The Cloudflare widget loads 2) It displays a checkbox noted, "verify you are human." 3) I click the checkbox. 4) It immediately begins "thinking" (spinny circle and "verifying...") for about nine seconds. There is an "error" message that appears during this, but no details are offered (see screenshot) 5) The widget reloads. 6) Go to step 2

This is an infinite loop.

Fixes attempted: - Disabling all extensions (uBlock, NoScript, Privacy Badger, Decentraleyes) - Clearing cache - Updating to the most recent FF build - Accessing in a private window - Changing DNS settings from Cloudflare to NextDNS - Disabling DNS over HTTPS altogether - Disabling HTTPS-only mode

Historically, I remember when you open the `sync` sidebar and right click on the tab grouping (i.e. Firefox on iPad), it opened a context menu where you had the option to `open all synced tabs`. This seems to be missing from the latest version of Firefox (138), but wanted to check in to see if I'm missing something or if I should downgrade my version of Firefox to get that functionality again.

i recently disabled 2fa and installed a new authentication app: Ente Auth. i keep getting invalid code each time i enter the generated code. i tried both options, scanned the QR code and entered the secret key manually. i used authy with success as my auth. app with firefox but can't use authy anymore. keep having issues setting up 2fa with other auth apps. thanks for any help you can offer. peace, Adrian

Yesterday I have updated tp macOS 15. Sine then I have trupuble displaying any webpages in Firefox 130. Th econnection just times out. Any other browser such as Brave, Safari, Home, Edge are still working as before teh update. How to fix this please?

I have 6 websites that I currently cannot sign into using Firefox. Support tells me to use those two crap browsers Chrome and Edge. I end up using Edge because it is embedded in my computer and I cannot delete. I will not install Chrome and have put on Avast Secure Browser and CClean browser. Both are just Chrome with a new gooey. My Father is also having the same trouble. Most of the sites are for Utilities and rewards programs. Avast is also blocked. Are you aware and working on getting this fixed?

Are tab groups like containers i.e. isolated from the others, so thay I can access sites logged into different accounts for instance or separate browsing experience/cookies ?

Hi everyone!

Since last update (136?) when I open a page with a video in a new tab, the width of this tab is very small! Almost half my current tab.

(I don't have another example but does this have anything to do with any "media" on a page?)

I have the width set to 152 for years...

When I play a video, the current tab is reduced. Pause= normal tab. Play= small tab. Pause= normal tab...

"browser.tabs.tabMinWidth should have been adhered to."

I just completely reinstalled Firefox: still the same.

What can I do, please?

Hi, During some tests I found that FF 115.19.0esr can still execute arbitrary JS similarly to CVE-2024-4367. I’ve checked the versions and > 115.11esr should be patched. Any payload with ‘/JS’ taken from https://github.com/luigigubello/PayloadsAllThePDFs/tree/main will do. Since this is probably important – FontMatrix is *not* working (no JS), original PoC (https://codeanlabs.com/wp-content/uploads/2024/05/poc_generalized_CVE-2024-4367.pdf) is also *not* working. I also wasn’t able to call an external script and so far haven’t found any path to exploit it beyond an alertbox. However, it still bothers me a lot and I’d like to know whether it’s the correct, expected behavior with FF+pdf.js, is it a vulnerability, or maybe my browser was somehow corrupted or is using some other mechanism that’s not within your control (my settings? about:config?).

Steps to re-create: 1. Open file in notepad 2. Add ‘/OpenAction 99 0 R’ after ‘lang’ in ‘1 0 obj section’ 3. After ‘endobj’ add ‘99 0 obj <</Type /Action /S /JavaScript /JS (app.alert\(1\);)>>’ 4. Result – alertbox popping twice

I found this file on my desktop. File type is Firefox HTML Document. Size 1KB. I've never noticed this before and wonder it I should delete it, move it, or what. Anything to worry about? I haven't opened it.

Thanks for any enlightenment you can offer!

To whom it may concern,

I have an angular application accessing data from a 3rd party data provider. To get data, POST-requests are sent to the data provider REST API (https://capzlog.aero). The application works correctly using Google Chrome and Microsoft Edge. However, when using Firefox, the following error appears:

"Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs. (Reason: CORS request did not succeed). Status code: (null)."

As the POST request contains basic authentication, a preflight-request (OPTIONS) is first sent to the data provider. This request fails when using Firefox (but not when using Chrome or Edge), see attached screen-shots.

I have spent 4 days on the internet trying to figure out a solution, but I could not solve the issue. I tried the following: 1) check the certificates of the 3rd party provider (https://capzlog.aero): There are no issues. 2) start Firefox in safe-mode, disactivating the "Enhanced Tracking Protecting", clearing the cache. 3) changing the following Firefox settings:

   security.enterprise_roots.enabled (true<->false)
   security.tls.version.min (1<->3)
   security.tls.version.max (2<->4)
   network.http.network-changed.timeout

I tried sending the "OPTIONS"-request using curl and it worked as expected:

curl --verbose -XOPTIONS -H "Access-Control-Request-Method: POST" -H "Origin: https://projectz.numericalsolutions.ch" https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs

• Host capzlog.aero:443 was resolved.
• IPv6: (none)
• IPv4: 156.67.9.80
• Trying 156.67.9.80:443...
• Connected to capzlog.aero (156.67.9.80) port 443
• ALPN: curl offers h2,http/1.1
• TLSv1.3 (OUT), TLS handshake, Client hello (1):
• TLSv1.3 (IN), TLS handshake, Server hello (2):
• TLSv1.2 (IN), TLS handshake, Certificate (11):
• TLSv1.2 (IN), TLS handshake, Server key exchange (12):
• TLSv1.2 (IN), TLS handshake, Server finished (14):
• TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
• TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
• TLSv1.2 (OUT), TLS handshake, Finished (20):
• TLSv1.2 (IN), TLS handshake, Finished (20):
• SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / secp384r1 / rsaEncryption
• ALPN: server accepted h2
• Server certificate:
• subject: CN=capzlog.aero
• start date: Dec 31 10:14:59 2024 GMT
• expire date: Mar 31 10:14:58 2025 GMT
• subjectAltName: host "capzlog.aero" matched cert's "capzlog.aero"
• issuer: C=US; O=Let's Encrypt; CN=R10
• SSL certificate verify ok.
• Certificate level 0: Public key type RSA (3072/128 Bits/secBits), signed using sha256WithRSAEncryption
• Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
• Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
• using HTTP/2
• [HTTP/2] [1] OPENED stream for https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs
• [HTTP/2] [1] [:method: OPTIONS]
• [HTTP/2] [1] [:scheme: https]
• [HTTP/2] [1] [:authority: capzlog.aero]
• [HTTP/2] [1] [:path: /api/pel/public/externalsystemflights/GetMissingIDs]
• [HTTP/2] [1] [user-agent: curl/8.6.0]
• [HTTP/2] [1] [accept: */*]
• [HTTP/2] [1] [access-control-request-method: POST]
• [HTTP/2] [1] [origin: https://projectz.numericalsolutions.ch]

> OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs HTTP/2 > Host: capzlog.aero > User-Agent: curl/8.6.0 > Accept: */* > Access-Control-Request-Method: POST > Origin: https://projectz.numericalsolutions.ch > < HTTP/2 204 < cache-control: private < server: Microsoft-IIS/10.0 < access-control-allow-origin: https://projectz.numericalsolutions.ch < access-control-allow-credentials: true < x-aspnet-version: 4.0.30319 < x-powered-by: ASP.NET < date: Thu, 16 Jan 2025 07:12:32 GMT <

• HTTP/2 stream 1 was not closed cleanly: HTTP_1_1_REQUIRED (err 13)
• Downgrades to HTTP/1.1
• Connection #0 to host capzlog.aero left intact
• Issue another request to this URL: 'https://capzlog.aero/api/pel/public/externalsystemflights/GetMissingIDs'
• Found bundle for host: 0x55ecfa0a46e0 [can multiplex]
• Hostname capzlog.aero was found in DNS cache
• Trying 156.67.9.80:443...
• Connected to capzlog.aero (156.67.9.80) port 443
• ALPN: curl offers http/1.1
• SSL reusing session ID
• TLSv1.3 (OUT), TLS handshake, Client hello (1):
• TLSv1.3 (IN), TLS handshake, Server hello (2):
• TLSv1.2 (IN), TLS handshake, Finished (20):
• TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
• TLSv1.2 (OUT), TLS handshake, Finished (20):
• SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / secp384r1 / UNDEF
• ALPN: server accepted http/1.1
• Server certificate:
• subject: CN=capzlog.aero
• start date: Dec 31 10:14:59 2024 GMT
• expire date: Mar 31 10:14:58 2025 GMT
• subjectAltName: host "capzlog.aero" matched cert's "capzlog.aero"
• issuer: C=US; O=Let's Encrypt; CN=R10
• SSL certificate verify ok.
• using HTTP/1.x

> OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs HTTP/1.1 > Host: capzlog.aero > User-Agent: curl/8.6.0 > Accept: */* > Access-Control-Request-Method: POST > Origin: https://projectz.numericalsolutions.ch > < HTTP/1.1 204 No Content < Cache-Control: private < Transfer-Encoding: chunked < Server: Microsoft-IIS/10.0 < Access-Control-Allow-Origin: https://projectz.numericalsolutions.ch < Access-Control-Allow-Credentials: true < X-AspNet-Version: 4.0.30319 < X-Powered-By: ASP.NET < Date: Thu, 16 Jan 2025 07:12:32 GMT <

• Connection #1 to host capzlog.aero left intact

Here, a comparison of the "OPTIONS"-HTTP-request as sent by Chrome and by Firefox:

CHROME OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9a comparison of the "OPTIONS"-HTTP-request as sent by Chrome and by Firefox: Access-Control-Request-Headers: authorization,content-type Access-Control-Request-Method: POST Connection: keep-alive Host: capzlog.aero Origin: https://projectz.numericalsolutions.ch Referer: https://projectz.numericalsolutions.ch/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36

FIREFOX OPTIONS /api/pel/public/externalsystemflights/GetMissingIDs undefined Host: capzlog.aero User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: */* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br, zstd Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Referer: https://projectz.numericalsolutions.ch/ Origin: https://projectz.numericalsolutions.ch Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Priority: u=4 TE: trailers

And the response header as seen by Chrome:

CHROME HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Language: en Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: https://projectz.numericalsolutions.ch Access-Control-Allow-Credentials: true Set-Cookie: AppSettings=Culture=en-US&Language=English&CountryAlpha2=CH; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure; SameSite=Lax X-Powered-By: ASP.NET Date: Thu, 16 Jan 2025 07:19:59 GMT Content-Length: 2

Here, a comparison of the Network Traffic as seen for Chrome and for Firefox:

CHROME 17:07:46.550256 IP ANYPC.57562 > 156.67.9.80.https: Flags [P.], seq 1480736564:1480737180, ack 2430285572, win 501, length 616 17:07:46.557654 IP 156.67.9.80.https > ANYPC.57562: Flags [P.], seq 1:393, ack 616, win 8212, length 392 17:07:46.557654 IP 156.67.9.80.https > ANYPC.57562: Flags [P.], seq 393:427, ack 616, win 8212, length 34 17:07:46.557683 IP ANYPC.57562 > 156.67.9.80.https: Flags [.], ack 393, win 501, length 0 17:07:46.557688 IP ANYPC.57562 > 156.67.9.80.https: Flags [.], ack 427, win 501, length 0 17:07:46.558334 IP ANYPC.57562 > 156.67.9.80.https: Flags [F.], seq 616, ack 427, win 501, length 0 17:07:46.558741 IP ANYPC.42786 > 156.67.9.80.https: Flags [S], seq 2926210792, win 64240, options [mss 1460,sackOK,TS val 2936933242 ecr 0,nop,wscale 7], length 0 17:07:46.562927 IP 156.67.9.80.https > ANYPC.57562: Flags [F.], seq 427, ack 617, win 8212, length 0 17:07:46.562962 IP ANYPC.57562 > 156.67.9.80.https: Flags [.], ack 428, win 501, length 0 17:07:46.563492 IP 156.67.9.80.https > ANYPC.42786: Flags [S.], seq 1974100572, ack 2926210793, win 65535, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 17:07:46.563514 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 1, win 502, length 0 17:07:46.565558 IP ANYPC.42786 > 156.67.9.80.https: Flags [P.], seq 1:1743, ack 1, win 502, length 1742 17:07:46.572094 IP 156.67.9.80.https > ANYPC.42786: Flags [.], ack 1743, win 8212, length 0 17:07:46.572094 IP 156.67.9.80.https > ANYPC.42786: Flags [P.], seq 1:161, ack 1743, win 8212, length 160 17:07:46.572133 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 161, win 501, length 0 17:07:46.572276 IP ANYPC.42786 > 156.67.9.80.https: Flags [P.], seq 1743:1794, ack 161, win 501, length 51 17:07:46.572421 IP ANYPC.42786 > 156.67.9.80.https: Flags [P.], seq 1794:3197, ack 161, win 501, length 1403 17:07:46.583942 IP 156.67.9.80.https > ANYPC.42786: Flags [.], ack 3197, win 8206, length 0 17:07:46.710020 IP 156.67.9.80.https > ANYPC.42786: Flags [P.], seq 161:638, ack 3197, win 8206, length 477 17:07:46.751327 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 638, win 501, length 0 17:07:46.754201 IP 156.67.9.80.https > ANYPC.42786: Flags [P.], seq 161:638, ack 3197, win 8206, length 477 17:07:46.754231 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 638, win 501, options [nop,nop,sack 1 {161:638}], length 0$

FIREFOX 17:08:28.962851 IP ANYPC.35980 > 156.67.9.80.https: Flags [S], seq 2319755284, win 64240, options [mss 1460,sackOK,TS val 2936975646 ecr 0,nop,wscale 7], length 0 17:08:28.972248 IP 156.67.9.80.https > ANYPC.35980: Flags [S.], seq 1053801102, ack 2319755285, win 65535, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 17:08:28.972330 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 1, win 502, length 0 17:08:28.974266 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 1:1894, ack 1, win 502, length 1893 17:08:28.987389 IP 156.67.9.80.https > ANYPC.35980: Flags [.], ack 1894, win 1026, length 0 17:08:28.987433 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 2921:3937, ack 1894, win 1026, length 1016 17:08:28.987461 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 1, win 502, options [nop,nop,sack 1 {2921:3937}], length 0 17:08:28.987598 IP 156.67.9.80.https > ANYPC.35980: Flags [.], seq 1:1461, ack 1894, win 1026, length 1460 17:08:28.987647 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 1461, win 524, options [nop,nop,sack 1 {2921:3937}], length 0 17:08:28.987682 IP 156.67.9.80.https > ANYPC.35980: Flags [.], seq 1461:2921, ack 1894, win 1026, length 1460 17:08:28.987707 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 3937, win 547, length 0 17:08:28.994553 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 1894:2052, ack 3937, win 547, length 158 17:08:29.005007 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 3937:3988, ack 2052, win 1025, length 51 17:08:29.005007 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 3988:4057, ack 2052, win 1025, length 69 17:08:29.005700 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 4057, win 547, length 0 17:08:29.006086 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 2052:2151, ack 4057, win 547, length 99 17:08:29.006123 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 2151:2577, ack 4057, win 547, length 426 17:08:29.008948 IP ANYPC.35980 > 156.67.9.80.https: Flags [P.], seq 2577:2615, ack 4057, win 547, length 38 17:08:29.018116 IP 156.67.9.80.https > ANYPC.35980: Flags [.], ack 2615, win 1023, length 0 17:08:29.018116 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 4057:4095, ack 2615, win 1023, length 38 17:08:29.024518 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 4095:4322, ack 2615, win 1023, length 227 17:08:29.024518 IP 156.67.9.80.https > ANYPC.35980: Flags [P.], seq 4322:4364, ack 2615, win 1023, length 42 17:08:29.024943 IP ANYPC.35980 > 156.67.9.80.https: Flags [.], ack 4364, win 570, length 0 17:08:35.342337 IP ANYPC.42786 > 156.67.9.80.https: Flags [.], ack 1974101210, win 501, length 0 17:08:35.349317 IP 156.67.9.80.https > ANYPC.42786: Flags [.], ack 1, win 8206, length 0

I really do not know what to do anymore to solve that problem.

As the problem is impacting hundreds of users, I really hope there is a solution.

In advance thanks for your help.

Hello, I'm having a problem on Windows 10. It's a fresh windows installation and I tried already some solutions: reinstalling firefox, deleting cache, refreshing firefox, private windows, no add ons, trouble shoot mod. Nothing helped. The problem seems to be with live stream, either on twitch.tv or youtube.

After firefox update, start page changed to first photo i added here, second photo is how it was before, is there any way to get it back? Before update i had version 131.0b9, now its 136.0b1

During what I assume are high bitrate sections of YouTube videos (e.g. lots of movement, high resolution) YouTube will constantly drop frames.

Video for example: https://www.youtube.com/watch?v=KLuTLF3x9sA

I have tried: • Safe Mode • Installing the Flatpak and testing in that, which also has a fresh profile as I don't use the Flatpak version • Testing different related about:config settings – I can't remember them all now, but I tested every one I found googling that is related to the issue or hardware acceleration.

Hardware acceleration is for sure working. Turning it off makes the video drop to one or two FPS.

Chromium has no problem with the same video. However, you can see from the screenshots that both read the resolution/scaling of my screen differently, and it implies that Firefox is rendering something like 6314 x 3552 while Chromium is rendering at UHD, the resolution of the screen and my video. If I turn off all my Global Scaling, Firefox stops dropping frames (the same info box on YouTube states resolution is UHD), reinforcing my theory about scaling being the issue. Both are confirmed to be using native Wayland.

When I try to log into sync with firefox, I get asked for an email code rather than the 2fa totp token I normally use. When I use the code I've been emailed I get an error that says "Bad Request". I can't log in on either of my computers. I've attached the error.

Can anyone tell me, please, how long I should be able to keep accessing Firefox on a Windows 10 tablet after Microsoft withdraws support for Windows 10 later this year? I seem to remember being able to access the internet on an old laptop as a 'test' a year or two after I'd stopped using it after Microsoft stopped supporting whatever version of Windows was on it, but I can't remember whether it was via Firefox or Internet Explorer or some other Microsoft browser. If Firefox will still 'work' will Microsoft withdrawing support for Windows 10 have any effect on how well it 'works', and/or how secure etc it will be? I am going to try to install some sort of Linux on the tablet (well) before Microsoft abandons Windows, but if it turns out I can't install Linux, I'm hoping I should at least be able to access the internet via Firefox. Thanks to anyone who can help. (ps I'm not sure whether this is the right place to post this question, it's just that performance and connectivity seemed to me [in my ignorance] to be most appropriate!)