Firefox 社群討論區

Below is the content-security-policy Firefox loads for chatGPT:

default-src 'self'; script-src 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'wasm-unsafe-eval' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; script-src-elem 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'sha256-RvbVrdDS11FSnQaULCOgXPA5u0nMP2Im1d2pGiRBGC4=' 'sha256-eMuh8xiwcX72rRYNAGENurQBAcH7kLlAUQcoOri3BIo=' auth0.openai.com challenges.cloudflare.com chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://apis.google.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://docs.google.com https://jidori.g1.internal.services.openai.org https://js.live.net/v7.2/OneDrive.js https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www-onepick-opensocial.googleusercontent.com wss://*.chatgpt.com wss://*.chatgpt.com/; img-src * 'self' blob: data: https: https://docs.google.com https://drive-thirdparty.googleusercontent.com https://ssl.gstatic.com; style-src 'self' 'unsafe-inline' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; font-src 'self' data: https://*.oaistatic.com https://fonts.gstatic.com; connect-src 'self' *.oaiusercontent.com api-iam.intercom.io api-js.mixpanel.com browser-intake-datadoghq.com chatgpt.com/ces fileserviceuploadsperm.blob.core.windows.net http://0.0.0.0:* http://localhost:* https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.onedrive.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://content.googleapis.com https://docs.google.com https://events.statsigapi.net https://featuregates.org https://graph.microsoft.com https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www.googleapis.com o33249.ingest.sentry.io statsigapi.net wss://*.chatgpt.com wss://*.chatgpt.com/ wss://*.intercom.io wss://*.webpubsub.azure.com; frame-src challenges.cloudflare.com https://*.sharepoint.com https://content.googleapis.com https://docs.google.com https://onedrive.live.com https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ js.stripe.com; worker-src 'self' blob:; media-src blob: 'self' *.oaiusercontent.com fileserviceuploadsperm.blob.core.windows.net https://cdn.openai.com https://persistent.oaistatic.com; frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj; report-to chatgpt-csp-new; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub1f79f8ac903a5872ae5f53026d20a77c&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=version%3Achatgpt-csp-new

Notice that it includes " frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj"

Would this extension be installed in the computer, kind of like the extensions that are loaded from Chrome (i.e., C:\Users\myUser\AppData\Local\Google\Chrome\User Data\extensions_crx_cache)?

Thanx

I went to settings and then to privacy and security and tried to find auto fill to remove credit card info. I couldn't find the setting the browser told me to find.

For months, now, whenever I try to post a comment on a Yahoo! News article, it reads: "Your comment has failed to published." This only happens in Firefox. My "Privacy & Security" settings are set to "Standard," my "History" set to "use custom settings for history" with settings "Remember browsing and download history" and "Clear history when Firefox closes." so cookies and cache get cleared then.

Sometimes this works when starting a new session. But I shouldn't have to start another session and lose all of my logins just to post a comment on a Yahoo News article.

Anyone else having this problem? Is there an easy and permanent fix? What are you settings set at?

I cannot access grocery coupons from Ralphs Market. When I try, I receive the message: Secure Connection Failed

An error occurred during a connection to www.ralphs.com. The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem.

Hello,

My password saved are deleted every time I close FF. It used to be manageable because Google and other sites didn't require me to fill my passwords (cookies did the trick I suppose) but now I also loose access to gmail and Youtube every time I close FF. It's annoying to have to use 2FA every damn time. And keeping the passwords available.

I've tried every answer I found by looking around :

- tried to start in safe mode - disable hardware acceleration - I have no extensions

FF saves the passwords correctly (at least they appear in the saved password tab) but they are erased every time I restart FF. The cookies aren't automatically deleted (FF remembers my browsing history) but I need to relog into Google.

I getting frustrated.

I have two questions regarding the usage of a private window. I am using 126.0.1 on a mac desktop (and laptop) using 13.6.7 ventura. Long time user of firefox, but new to private windows.

1) I am using a popup blocker on firefox (UBlock Origin). Its icon shows on the browser window, but in a private window the icon disappears and I am getting popups. Do pop up blockers work in a private window? Is there a setting for that? 2) on my main browser Firefox home page I have 4 rows of shortcuts. On a private window home page there are none, and no settings icon to address this. Are shortcuts allowed on a private window home page and, if so, how to add?

Thanks

the only autoplay setting i can find is under privacy and security. the page shows DEFAULT FOR ALL WEBSITES: Block Audio and Video, but videos still open and play. the page does not retain the change when i select the button REMOVE ALL WEBSITES. this problem has not been happening for years. it may have begun about six months ago. thank you for your time

In my settings under Connected Services there is a list of devices that have signed into my firefox account. I do not recognize one of them. The Connected Service listed name is Firefox Mobile 126, Android 14. How can I find out where this is coming from?

Thank you

Hello,

I have tried to find solutions to this and have not found anything to be a permanent fix. I recently have found my FireFox browser closing my first attempt to open and upon opening my second attempt Firefox will open but give me a pink address bar with a robot stating "browser is under remote control (reason: Dev Tools)" and the only thing that seems to get rid of this temporarily is going to my control panel (I'm a windows user) and toggling the remote assistance checkbox (I keep it unchecked since this problem has occurred). Then after re-opening Firefox again, it appears to work normally - no pink address bar with robot. Is there a permanent fix for this? Is it an OS issue or a Firefox issue? Maybe both? Any insight would be greatly appreciated. I am fairly tech savvy, but not too familiar with browser interfaces and solutions involving the command line.

Thank you,

For about 24hr now, every time I clear cookies and cache data, 20kB remain. I clear this data often, and the cookie and cache data always registers "0kB" after I click on "Clear Data", until yesterday. My OS is Ubuntu 22.04. Where can I find that file so I can delete it?

Good afternoon,

If necessary, I am available to add more information about this case (145005), in English or Portuguese.

Best regards,

Ana Patrícia Paquete Visual Designer

When I go to Settings > Privacy & Security the only "autofill" setting is to import data from another browser. I am signed in, in the US, and my VPN is set to Seattle.

When I click on a dropdown the settings automatically open in a new tab. For instance when logging into something and choosing my password and/or username from a dropdown, when I click on my choice a new tab suddenly opens with the settings menu - specifically the autofill thru permissions area in the "privacy and security" submenu. Just started doing this randomly the other day so I rebooted the computer and that fixed the problem, but its now started doing it again. Please help?

as you can see in the screenshot it says the mic is only"allowed temporarily" and when i go to permissions it doesn't let me add a site to grant perms i can just search for sites and thats it. its annoying cuz on textnow i have to keep granting perms

Why is firefox not showing up in my authenticator app???

I saw a previous post that has since been closed suggesting the solution be disabling 2FA authentication - with all due respect to whoever suggested that, I don't think that should be the best solution. I'd like to keep 2FA enabled. I'd just like to know why Firefox doesn't appear in my Google or Microsoft Authenticator apps. I end up having to use recovery codes which makes the process a pain.