av9ash/GitBugs huggingface dataset:
Bug: HTML injection to SSRF
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-09-21 04:28:42+00:00
Resolved: 2021-09-21 14:40:47+00:00

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:75.0) Gecko/20100101 Firefox/75.0

Steps to reproduce:

vulnerable url: "https://support.mozilla.org/en-US/questions/new/firefox-enterprise/form"

This form allows injecting <img> html tag.

1. Visit: https://support.mozilla.org/en-US/questions/new/firefox-enterprise/form
2. Inject the following code in the description box

<img src="<your server addr>" width="200"/>
3. Then submit the form.



Actual results:

It will make a request to the specified server.
Bug: Critical Condition of Firefox Use-After-Free Bug
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2021-09-21 06:28:00+00:00
Resolved: 2021-09-21 14:37:59+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36
Firefox for Android

Steps to reproduce:

Cybersecurity and Infrastructure Security Agency (CISA) urged users of Mozilla Foundation’s Firefox browser to patch a bug, tracked as CVE-2020-16044, and rated as critical. The vulnerability is classified as a use-after-free bug and tied to the way Firefox handles browser cookies and if exploited allows hackers to gain access to the computer, phone or tablet running the browser software.


Actual results:

 malicious peer could have modified a COOKIE-ECHO chunk in a SCTP packet in a way that potentially resulted in a use-after-free. We presume that with enough effort it could have been exploited to run arbitrary code,” according to a Mozilla security bulletin posted


Expected results:

Mozilla did not credit the bug discovery, nor did it state whether it was a vulnerability actively being exploited in the wild.
Bug: [MSIX] Firefox does not show right path to Local Directory inside about:profiles
Status: NEW
Priority: --
Created: 2021-09-21 09:57:58+00:00
Resolved: 2024-11-08 13:45:18+00:00

*Affected versions*
* 94.0a1 MSIX (20210920212918)
* 93.0b8 MSIX (20210920185952)
* 92.0b9 MSIX



*Affected platforms*
* Windows 10x64 Home S mode
* Windows 11 x64

*Preconditions*
* clean environment required to reproduce. No normal firefox installation.

*Steps to reproduce*
1. Install Firefox [93.0bx MSIX](https://treeherder.mozilla.org/jobs?repo=mozilla-beta&selectedTaskRun=UW1BtuyARqi-2AxqEUVApw.0) and open it.
2. Go to about:profiles and click Open Folder for Local Directory.





*Expected result*
* Firefox profile folder is opened.


*Actual result*
* Location is unavailable error is displayed.


*Regression range*
*  Not a regression, reproducible with 92.0b9 as well.

*Notes*
* Attached a screen recording.
* Firefox is working as intended. Only the profile path is not right inside about:profiles. Going manually to `C:\Users\user\AppData\Local\Packages\Mozilla.Firefox.Beta_gmpnhwe7bv608\LocalCache\Local\Mozilla\Firefox\Profiles\g7k3i1lk.default-beta` the profile exists. Also to test it I deleted the `google4` folder inside profile-> safebrowsing and clicked on update inside about:url-classifier->`google4` and the folder was created as expected.
Bug: CommonNames doesn't correctly use the og: site page data
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2021-09-21 10:19:56+00:00
Resolved: 2021-09-27 06:16:51+00:00

The page data is currently collected as an array of items but CommonNames assumes it is a single object. It probably should be but for now we can just fix CommonNames to work correctly.
Bug: Intermittent [Tier 2] browser/base/content/test/protectionsUI/browser_protectionsUI_trackers_subview.js | Test timed out -
Status: RESOLVED
Priority: P5
Resolution: INCOMPLETE
Created: 2021-09-21 11:43:51+00:00
Resolved: 2021-10-19 17:02:48+00:00

**Filed by:** smolnar [at] mozilla.com
**Parsed log:** https://treeherder.mozilla.org/logviewer?job_id=352210602&repo=mozilla-central
**Full log:** https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/Y-DMVsglSiitOIuu0LtVVg/runs/0/artifacts/public/logs/live_backing.log

---
```
INFO - TEST-PASS | browser/base/content/test/protectionsUI/browser_protectionsUI_trackers_subview.js | Indicates whether the tracker was blocked or allowed - 
[task 2021-09-21T10:58:06.466Z] 10:58:06     INFO - Received onSecurityChange event 1 of 1
[task 2021-09-21T10:58:06.467Z] 10:58:06     INFO - Testing trackers subview with TP enabled and a CB exception removed.
[task 2021-09-21T10:58:06.467Z] 10:58:06     INFO - Buffered messages finished
[task 2021-09-21T10:58:06.468Z] 10:58:06     INFO - TEST-UNEXPECTED-FAIL | browser/base/content/test/protectionsUI/browser_protectionsUI_trackers_subview.js | Test timed out - 
[task 2021-09-21T10:58:06.469Z] 10:58:06     INFO - GECKO(3304) | MEMORY STAT | vsize 3588MB | residentFast 656MB | heapAllocated 274MB
[task 2021-09-21T10:58:06.470Z] 10:58:06     INFO - TEST-OK | browser/base/content/test/protectionsUI/browser_protectionsUI_trackers_subview.js | took 45100ms
```
Bug: In dark theme (and dark alpenglow) the red "blocked" icon in the main download panel should be lighter (matching the sub panel)
Status: VERIFIED
Priority: P2
Resolution: FIXED
Created: 2021-09-21 12:13:48+00:00
Resolved: 2021-10-26 19:29:18+00:00

**Affected versions**
* latest Nightly 94.0a1
* Beta 93.0b7

**Affected platforms**
* Win 10 x64
* Ubuntu 20.04 x64
* macOS 11

**Preconditions**
- Firefox Dark or Alpenglow theme is applied 

**Steps to reproduce**
1. Navigate to https://www.thinkbroadband.com/download.
2. Download the 50 MB sample file from the test page.
3. Click on the download icon from the toolbar.
4. Click on the download item in order to open the sub panel.

**Expected result**
* The warning icon has a strong red contrast. It has the same contrast as displayed in the main panel.

**Actual result**
* The warning icon has a light red contrast. 

**Suggested Severity**
* S3, since this won't affect the functionally. 

**Regression range**
* Pushlog: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=24c9b17fd62309104[…]a1acc418ce7&tochange=86dd58a44d200bf475d6f39dbe7ecfca4fac41a6
* Potential regressor: Bug 1715001

**Additional notes**
* The issue does not reproduce with Light theme, it can be only reproduced with the themes written above.
Bug: Tab scrolling disrupts workflow
Status: UNCONFIRMED
Priority: --
Created: 2021-09-21 12:31:25+00:00
Resolved: 2021-11-15 22:12:34+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0

Steps to reproduce:

Open a bunch of tabs - unclear how many (this is part of the bug) but a lot.
Move your mouse to the right-most tab.



Actual results:

Firefox instantly scrolls everything to the right forcing the user to manually click back to the tab they were just trying to access.


Expected results:

Firefox shouldn't have done anything. I think this is an UI bug (or maybe feature, I don't know) but basically Firefox is making a presumption about workflow which is that when the user is mousing up to the tab bar they ALWAYS want the tabs offscreen to the left and therefore Firefox scrolls them into view.

This is incorrect, at least in my case and I have to imagine with other people as well. Firefox, for me, gets it wrong every single time and offer no way to halt this behavior. Personally, my tabs to left are either pinned or static and it's the tabs farthest to the right that are the ones I'm always opening and closing.

Firefox fails to allow for this behavior which, to me, is a bug since obviously a user trying to click a rightmost tab when there are a lot of tabs open and Firefox responding by instantly whisking that tab out of view and placing another tab - one the user has no interest in - under mouse pointer and then forcing the user to manually scroll back to the original tab that they were trying to access (and then doing the exact same thing again moments later) can't really be a feature I don't think.
Bug: download protection bypass on macOS with .inetloc
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2021-09-21 12:55:11+00:00
Resolved: 2024-05-30 17:36:40+00:00

firefox Version: 92.0
Operating System: macOS Big Sur, 11.5.2

Vladimir Metnew reported that .fileloc files on macOS can bypass download protection in 2019:https://bugzilla.mozilla.org/show_bug.cgi?id=1596668
However, .inetloc files are similar to .fileloc files and .inetloc is not in blacklist.
When open a .fileloc file in firefox, firefox will warn:" 'test.fileloc' is an executable file. Executable files may contain viruses or other malicious code that could harm your computer. Use caution when opening this file. Are you sure you want to launch 'test.fileloc'? "
But when open a .inetloc file in firefox there is no warning and attacker may execute arbitrary commands.
I provided a test.inetloc which can open calc for test.
Bug: Searching through the adress-bar opens new tab
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-09-21 15:55:05+00:00
Resolved: 2021-09-29 01:26:46+00:00

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:92.0) Gecko/20100101 Firefox/92.0

Steps to reproduce:

(origin: https://support.mozilla.org/en-US/questions/1341940)

1. In Firefox on Linux (Linux Mint, in my case), go to any website. Click onto the adress-bar or press CTRL+L to move there.
2. Type in anything and hit enter


Actual results:

Observe that a new tab gets opened with the new search, even though no command was issued to start this action.

As far as I am aware, this only happens in Linux and only started happening sometime in 2021.


Expected results:

The current tab should stay focused and the search should be performed in this current tab.
Bug: Send Tab to Device Missing
Status: RESOLVED
Priority: --
Resolution: WORKSFORME
Created: 2021-09-21 18:10:18+00:00
Resolved: 2021-09-22 16:49:10+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0

Steps to reproduce:

Update to v92


Actual results:

The "Send Tab to Device" option in the context menu is missing.


Expected results:

I didn't see any release note about its removal so it should be there.
Bug: Honor screenshot's toolbar button disable state when switching tabs
Status: RESOLVED
Priority: P2
Resolution: WONTFIX
Created: 2021-09-21 18:56:03+00:00
Resolved: 2021-09-30 17:01:29+00:00

This was pointed out in https://bugzilla.mozilla.org/show_bug.cgi?id=1725432#c3, but we should keep the button disabled if we return to a tab when the screenshots UI is already shown.
Bug: Bookmarks toolbar buttons exposed to accessibility even when hidden (due to CSS visibility: visible)
Status: RESOLVED
Priority: P3
Resolution: FIXED
Created: 2021-09-21 21:05:45+00:00
Resolved: 2023-06-02 15:22:08+00:00

STR:
0. Add bookmarks to the bookmarks bar, ensure toolbar is hidden
1. Enable VoiceOver
2. Focus the web area with the VO cursor
3. Attempt to reach the navigation toolbar with VO+previous

Expected:
VO moves focus from the web area to the navigation toolbar

Actual:
VO focuses an invisible node in the upper left corner of the screen, between the chrome and the web area, and reads your bookmark toolbar bookmarks in order. After navigating through them, VO focuses the navigation toolbar.
Bug: Bookmarks Toolbar is double-spaced in drop-down (vertical) portion
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-09-22 00:06:38+00:00
Resolved: 2021-10-20 02:42:06+00:00

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:92.0) Gecko/20100101 Firefox/92.0

Steps to reproduce:

Click & pull down the overflow (vertical) portion of the menu toolbar.


Actual results:

Looks like font or font size has changed to accommodate a bigger/taller highlighter bar.  But entries are now double-spaced and take up *too much* space.  Not the same as Bug 1429857 ("Bookmarks list appears double-spaced") unless this is a regression.


Expected results:

Menu should be single-spaced to facilitate better scanning & scrolling by the user.
(Have to mouse down much farther even for first few entries...)  We don't need so much white-space ("gray-space") between items -- a thinner highlighter will suffice.
Bug: Open image modal pops up when dragging a draggable element to a new position.
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2021-09-22 00:24:58+00:00
Resolved: 2023-07-24 11:07:56+00:00

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:93.0) Gecko/20100101 Firefox/93.0

Steps to reproduce:

Open image modal pops up when dragging a draggable element to a new position on a form.  This is true for Firefox 92 and 93 versions. 

VIDEO LINK: 
https://www.awesomescreenshot.com/video/5321570?key=3d7f4a401fa0d45ce6f18dd82f93ba26




Actual results:

When trying to edit a form with a draggable element the open image modal opens. 


Expected results:

I am not trying to open an image.
Bug: [XFA] Selections of checkboxes or radio buttons are not saved (on a specific document)
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-09-22 11:08:20+00:00
Resolved: 2021-09-24 15:35:57+00:00

+++ This bug was initially created as a clone of Bug #1723734 +++

**Note**
* When the user loads a specific PDF file in Adobe Reader, selects some radio buttons, and then saves it and reopens it, he will notice that the radio button selections previously made are not being shown.

**Affected versions**
* Beta v93.0b8

**Affected platforms**
* all

**Steps to reproduce**
1. Launch browser.
2. Load the attached PDF file.
4. Make some radio button selections.
5. Save the PDF file.
6. Reopen it in either Firefox or Adobe Reader.

**Expected result**
* The radio button selections are properly displayed.

**Actual result**
* The radio button selections are not shown.

**Regression range**
* Not a regression.

**Additional information**
* This issue does not occur on all the radio buttons, but specifically on that set.
* The rendering of the selected radio button appears to be different than other radio button selections in other documents.
* Based on the above arguments, I've set the severity to S3.
Bug: [XFA] The field label is not displayed correctly (on a specific document)
Status: NEW
Priority: P3
Created: 2021-09-22 11:26:48+00:00
Resolved: 2022-02-18 07:51:29+00:00

**Note**
* When the user loads the corresponding PDF file, he will notice that the placeholder texts are not being displayed.

**Affected versions**
* Beta v93.0b8

**Affected platforms**
* all

**Steps to reproduce**
1. Launch browser.
2. Load the attached PDF file.
3. Scroll to the "The following information will populate the Proof of Authority document (page 2)" section
4. Compare to its rendering in Adobe Reader.


**Expected result**
* The 3 field labels are correctly displayed:
Legal name of the business (required)
Name of the Owner, Director, Partner or Officer of the Business (required)
Name of the individual being assigned Profile Authority (required)

**Actual result**
* The 3 field labels are incorrectly displayed:
vAddress
vAddress
vAddress

**Regression range**
* Not a recent regression.

**Additional Information**
* I do not know whether this issue is caused by the lack of support for dynamic elements, so I've blocked both bug 1706133 and bug 1717661. Remove the incorrect one.
* While this issue is seen for the first time in very many documents, I'm setting the severity as S3.
Bug: [Monochromatic Themes] Monochromatic themes are no longer applied after a restart
Status: RESOLVED
Priority: P1
Resolution: INVALID
Created: 2021-09-22 13:20:30+00:00
Resolved: 2021-09-22 14:36:38+00:00

**Affected versions**
* Fx94.0a1

**Affected platforms**
* Win 10
* macOS 10.15
* Ubuntu 20.04

**Pre-conditions**
The following pref is set: browser.theme.temporary.monochromatic.enabled = true

**Steps to reproduce**
1. Launch Firefox.
2. Go to about:addons -> Themes section
3. Apply one of the new themes. e.g. Abstract - Bold
4. Restart the browser
or
4.1. Re-open the browser normaly.

**Expected result**
* Theme is still applied.

**Actual result**
* The new theme is no longer applied.

**Regression range**
* Not a regression.

**Additional notes**
* Browser reverts to the system theme.
* The themes disappear from the about:addons themes section as well.
Bug: move tab not closing window
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-09-22 14:11:21+00:00
Resolved: 2021-11-17 22:33:05+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:94.0) Gecko/20100101 Firefox/94.0

Steps to reproduce:

Nightly is not handling moving tabs correctly today.

Drag tab to new set of windows.


Actual results:

Tab is opened, window does not go away.


Expected results:

Window should close and tab be "moved into" other window.
Bug: [Monochromatic Themes] The theme is not applied to the Notification icons
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-09-22 14:17:05+00:00
Resolved: 2021-09-22 17:10:07+00:00

**Affected versions**
* Firefox 94.0a1

**Affected platforms**
* macOS 10.15
* Windows 10 x64
* Ubuntu 20.04 x64

**Preconditions**
* browser.theme.temporary.monochromatic.enabled = true
* Select one the Monochromatic themes.

**Steps to reproduce**
1. Go to [this site](http://testsafebrowsing.appspot.com/) and perform downloads 5 to 7 from the "Desktop Download Warnings" section.
2. Observe the warning icons. 

**Expected result**
* The icons respects the theme colors. 

**Actual result**
* The  icon don't respect the theme colors. 

**Regression range**
* Not a regression.

**Additional notes**
* Please look at the specs: https://www.figma.com/file/xaRff6432QsirRftX8NZgb/MR2-Themes?node-id=86%3A17747
Bug: [Monochromatic Themes] The theme is not applied to the download icon
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-09-22 14:17:08+00:00
Resolved: 2021-09-22 17:09:55+00:00

**Affected versions**
* Firefox 94.0a1

**Affected platforms**
* macOS 10.15
* Windows 10 x64
* Ubuntu 20.04 x64

**Preconditions**
* browser.theme.temporary.monochromatic.enabled = true
* Select one the Monochromatic themes.

**Steps to reproduce**
1. Go to [this site](http://www.africau.edu/images/default/sample.pdf) and perform a download.
2. Observe the download icon .

**Expected result**
* The Download icon respects the theme colors. 

**Actual result**
* The Download icon is blue. 

**Regression range**
* Not a regression.

**Additional notes**
* Please look at the specs: https://www.figma.com/file/xaRff6432QsirRftX8NZgb/MR2-Themes?node-id=86%3A17747
Bug: [Monochromatic Themes] The theme is not applied to the Sidebar selection colors
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2021-09-22 14:17:13+00:00
Resolved: 2021-10-06 12:11:09+00:00

**Affected versions**
* Firefox 94.0a1

**Affected platforms**
* macOS 10.15
* Windows 10 x64
* Ubuntu 20.04 x64

**Preconditions**
* browser.theme.temporary.monochromatic.enabled = true
* Select one the Monochromatic themes.

**Steps to reproduce**
1. Go to Application menu -> More tools -> Customize toolbar... and drag the "Show sidebars" button on the Toolbar.
2. Click on it and observe the Sidebar.. 

**Expected result**
* The Sidebar respects the theme colors. 

**Actual result**
* The Sidebar doesn't respect the theme colors. 

**Regression range**
* Not a regression.

**Additional notes**
* Please look at the specs: https://www.figma.com/file/xaRff6432QsirRftX8NZgb/MR2-Themes?node-id=86%3A17747
Bug: [Monochromatic Themes] The color for the Bookmark icon doesn’t correspond to the theme colors
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-09-22 14:17:16+00:00
Resolved: 2021-09-22 17:09:42+00:00

**Affected versions**
* Firefox 94.0a1

**Affected platforms**
* macOS 10.15
* Windows 10 x64
* Ubuntu 20.04 x64

**Preconditions**
* browser.theme.temporary.monochromatic.enabled = true
* Select one the Monochromatic themes.

**Steps to reproduce**
1. Go to any site and bookmark the page.
2. Observe the start shaped icon. 

**Expected result**
* The bookmark icon respects the theme colors. 

**Actual result**
* The bookmark icon is blue. 

**Regression range**
* Not a regression.

**Additional notes**
* Please look at the specs: https://www.figma.com/file/xaRff6432QsirRftX8NZgb/MR2-Themes?node-id=86%3A17747
Bug: [Monochromatic Themes] The click effect inside ETP panel doesn't respect the theme colors.
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-09-22 14:17:20+00:00
Resolved: 2021-09-22 20:27:36+00:00

**Affected versions**
* Firefox 94.0a1

**Affected platforms**
* macOS 10.15
* Windows 10 x64
* Ubuntu 20.04 x64

**Preconditions**
* browser.theme.temporary.monochromatic.enabled = true
* Select one the Monochromatic themes.

**Steps to reproduce**
1. Go to [this site](https://edition.cnn.com/) and click on the shiled icon from the Url bar.
2. Click and hold on one of the elements listed. 

**Expected result**
* The hover effect respects the theme colors. 

**Actual result**
* The hover effect is a darker grey. 

**Regression range**
* Not a regression.

**Additional notes**
* This happens in the Download panel as well.
Bug: [Monochromatic Themes] hover/active colors inside ETP panel doesn't respect the theme colors.
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2021-09-22 14:17:23+00:00
Resolved: 2021-10-06 12:14:15+00:00

**Affected versions**
* Firefox 94.0a1

**Affected platforms**
* macOS 10.15
* Windows 10 x64
* Ubuntu 20.04 x64

**Preconditions**
* browser.theme.temporary.monochromatic.enabled = true
* Select one the Monochromatic themes.

**Steps to reproduce**
1. Go to [this site](https://edition.cnn.com/) and click on the shiled icon from the Url bar.
2. Hover the elements listed. 

**Expected result**
* The hover effect respects the theme colors. 

**Actual result**
* The hover effect is grey. 

**Regression range**
* Not a regression.

**Additional notes**
* This happens in the Download panel as well.
Bug: Implement/fix mappings for ins, del elements and insertion, deletion roles
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2021-09-22 15:00:50+00:00
Resolved: 2021-09-24 10:52:45+00:00

Steps to reproduce:
1. Load `data:text/html,<ins>foo</ins> <del>bar</del>`
2. Use a platform accessibility inspector (e.g. Accerciser) to examine the roles

Expected results:
* Insertion would be exposed as ROLE_CONTENT_INSERTION in ATK and IA2
* Deletion would be exposed as ROLE_CONTENT_DELETION in ATK and IA2

Actual results:
* Both are exposed as ROLE_SECTION in ATK

Changing the test case to use the ARIA 1.2 deletion and insertion roles produces the same results.
Bug: Can’t interact with active tab in several ways
Status: RESOLVED
Priority: --
Resolution: WORKSFORME
Created: 2021-09-22 15:07:06+00:00
Resolved: 2021-09-23 14:46:25+00:00

User Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 15_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Mobile/15E148 Safari/604.1

Steps to reproduce:

I have two windows of Firefox 92.0 open on a single monitor on Windows version 1909 build 18363.1316. I created the second window by dragging one of the tabs out of the first window. In the active tab of the first window, I tried clicking on the following:

- the X that is supposed to close the active tab
- the url bar
- the refresh button
- the zoom in/out buttons
- the menu icon




Actual results:

None of those buttons did anything. Clicking the same buttons in the second Firefox window worked correctly.


Expected results:

Each button should have done the thing it’s supposed to do.