av9ash/GitBugs huggingface dataset:
Bug: Quarantined PDF files downloaded without HTTPS: Clicking on folder icon opens file (Gah!)
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-06-07 20:10:04+00:00
Resolved: 2023-07-06 15:26:02+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0

Steps to reproduce:

When a PDF download is quarantined because it was done via HTTP instead of HTTPS, I can click on the folder.


Actual results:

The PDF file is opened instead of the folder.  This defeats the purpose of opening the folder, which is to scan the PDF file.


Expected results:

The folder should open so that the PDF can be scanned before it is opened.
Bug: The new migration window accepts importing any type of file when using the Import Bookmarks from HTML option
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-06-08 06:34:25+00:00
Resolved: 2023-07-18 02:09:28+00:00

**Found in**
* 115.0b2

**Affected versions**
* 116.0a1 (2023-06-07)
* 115.0b2











**Tested platforms**
* Affected platforms: Windows10 x64, Ubuntu 20.04, macOS 12
* Unaffected platforms: none

**Preconditions**
* browser.migrate.content-modal.enabled: true

**Steps to reproduce**
1. Open the new migration window and select `Bookmarks from HTML file`.
2. On the `Import Bookmarks File` window choose `All files`.
3. Import a random file.





**Expected result**
* Only HTML files are available.

**Actual result**
* Importing a random file that is not a .html file will display a `Bookmarks Imported Successfully` window that contains the imported entries variable displayed.

**Regression range**
* Not a regression, it started happening with the implementation of Bookmark importing from HTML files (bug 1833427).


**Additional notes**
* Attached a screen recording.
* The issue cannot be reproduced with the legacy migration window.
Bug: No error is displayed when importing an empty HTML file
Status: VERIFIED
Priority: P3
Resolution: FIXED
Created: 2023-06-08 09:14:20+00:00
Resolved: 2023-06-22 06:55:33+00:00

**Found in**
* 115.0b2

**Affected versions**
* 116.0a1 (2023-06-07)
* 115.0b2











**Tested platforms**
* Affected platforms: Windows10 x64, Ubuntu 20.04, macOS 12
* Unaffected platforms: none

**Preconditions**
* browser.migrate.content-modal.enabled: true
* empty .html file

**Steps to reproduce**
1. Open the new migration window and select `Bookmarks from HTML file`.
2. Import an emty .html file.






**Expected result**
* An error is displayed giving the user option to select another file per [spec doc](https://docs.google.com/document/d/19sfXaaiZ5K9fyb6ku_9oJcdcZMqcrunMAIQPnbxMGgY/edit#) & [Figma](https://www.figma.com/file/PcMkM0ZaSSy3zmS3CYGWNj/Handover---students?type=design&node-id=328-6305&t=KNnA9QWaXIcuxzTe-0)

**Actual result**
* Bookmarks imported Successfully message is displayed.

**Regression range**
* Not a regression, it started happening with the implementation of Bookmark importing from HTML files (bug 1833427).


**Additional notes**
* Attached a screen recording.
Bug: No message when website cannot be reached
Status: RESOLVED
Priority: --
Resolution: WORKSFORME
Created: 2023-06-08 09:48:16+00:00
Resolved: 2023-06-28 14:00:46+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

Trying to visit a website that suddenly became unavailable.


Actual results:

I get a blank page without any messages


Expected results:

I should receive a message showing what FFox is doing. For example, in Chrome I get this:
"This site can’t be reached
The webpage at https://cordis.europa.eu/dpt/ might be temporarily down or it may have moved permanently to a new web address.
ERR_INVALID_RESPONSE"
Firefox should provide something like this instead of a blank page.
Bug: [Win][HCM] Keyboard focus outline is missing on New Tab tile controls in HCM
Status: NEW
Priority: P3
Created: 2023-06-08 14:48:45+00:00
Resolved: 2023-06-08 21:14:41+00:00

### STR:
1. Ensure a system High Contrast Mode is enabled (`Settings` > `Accessibility` > `Contrast Themes` > (i.e. `Night Sky`) > `Apply`)
1. Open Firefox
1. Navigate to the New Tab
1. Using keyboard alone (by pressing `Tab` and `Tab+Shift`) navigate to promo tiles and observe the visual appearance and ease to locate the keyboard focus position

### Expected:
1. No focus outline is provided for tiles
1. an unexpected `...` menu control is appearing on focus but the only focus indication is the icon itself

### Actual:
1. All active UI elements can be focused and, when this focus is placed, the semantic HCM styling is provided - an outline is added to the focused control that makes it easy to locate the focus position on the screen and follow the focus.
Bug: "Always ask you where to save files" is not being enforced to pdf files
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2023-06-08 16:56:34+00:00
Resolved: 2024-05-23 13:26:57+00:00

Steps to reproduce:

1. Uploaded a pdf to a file sharing service
2. Clicked on download and the file was downloaded to the system


Actual results:

Pdf was downloaded to the system.


Expected results:

The file should have been first asked where to save files. As the settings was set to `Always ask you where to save files` and in application for pdf handling was set to `Open in firefox`
Bug: the permission prompt on the popup window is in the wrong place when exiting fullscreen mode leading to confusion
Status: RESOLVED
Priority: P3
Resolution: DUPLICATE
Created: 2023-06-08 20:44:43+00:00
Resolved: 2024-05-30 18:10:31+00:00

permission prompt on the popup window is in the wrong place (not in the window pop up) when exiting fullscreen (the pop up window is hidden behind the permission prompt or somewhere else),  leading to confusion or leads to clickjacking

step to produces
1.  open f.html
2. click "click" button
3. on window pop up click "click" button
4. on fullscreen mode , click "double click" button
Bug: TPS - Unable to sync bookmark, history and tabs intermittently
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2023-06-08 22:30:12+00:00
Resolved: 2023-06-26 19:27:08+00:00

During the past few week, syncing bookmark, history and tabs has been failing intermittently (usually "from device"). I haven't been able to reproduce such TPSError reliably. Here are the error messages: 
```
E                   SyncIntegrationTests.tps.TPSError: [phase phase1] RunNextTestAction failed - Error: ASSERTION FAILED! places item not found; bookmark (uri: http://www.example.com/, title: Example Domain, location: mobile) not found(resource://tps/logger.sys.mjs:78:11) JS Stack trace: AssertTrue@logger.sys.mjs:78:11
```
```
E                   SyncIntegrationTests.tps.TPSError: [phase phase1] RunNextTestAction failed - Error: ASSERTION FAILED! Uri visits not found in history database: {"uri":"http://www.example.com/","visits":[{"type":1},{"type":2}]}(resource://tps/logger.sys.mjs:78:11) JS Stack trace: AssertTrue@logger.sys.mjs:78:11
```
```
E                   SyncIntegrationTests.tps.TPSError: [phase phase1] RunNextTestAction failed - Error: ASSERTION FAILED! places item not found; bookmark (uri: http://www.example.com/, title: Example Domain, location: mobile) not found(resource://tps/logger.sys.mjs:78:11) JS Stack trace: AssertTrue@logger.sys.mjs:78:11
```

Here are some sample full logs to the test runs:

https://storage.googleapis.com/mobile-reports/public/firefox-ios-M1/result_538/SyncIntegrationTests/results/index.html

https://storage.googleapis.com/mobile-reports/public/firefox-ios-M1/result_537/SyncIntegrationTests/results/index.html

https://storage.googleapis.com/mobile-reports/public/firefox-ios-M1/result_536/SyncIntegrationTests/results/index.html
Bug: Sentence from Wikipedia is wrongly translated in built-in version, correctly in addon
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2023-06-08 22:46:49+00:00
Resolved: 2024-07-19 19:19:58+00:00

The sentence "It is owned by LVMH Moët Hennessy Louis Vuitton SE, better known as LVMH.", when translated to Italian, is missing a piece: "È di proprietà di LVMH Moit Hennessy Louis Vuitton SE, meglio conosciuto come .". With the addon, it is better translated as "È di proprietà di LVMH Mot Hennessy Louis Vuitton SE, meglio conosciuto come LVMH.".

I added a reduced test case for this, might be worth investigating if it's an easy fix.
Bug: Translation thingy is triggered on full-page canvas demo page
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-06-09 10:42:58+00:00
Resolved: 2023-06-09 19:31:04+00:00

Go to https://gateway.fxhash2.xyz/ipfs/QmafscbWKAa6pwZwMxxrRPd9XcRXDGGJpAy66RN4ATBVkt/?fxhash=oomw9zo1PkUt678B8XsdXq8C1QZ1i7TxjgxsjHunyNQ1HUmyXPj

Profile: https://share.firefox.dev/45X1Ibs

Look at the end at the DOM-worker thread. Some translation thingy is getting loaded. 
I dont know if loading that thingy is expected for a canvas full-page demo.

Note: The link to the demo is just one example. All such full-page demos trigger the translation thingy to be loaded.
Bug: Safari history import attempts cause delay in showing migrator
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2023-06-09 11:47:56+00:00
Resolved: 2023-07-26 13:20:33+00:00

STR:

0. a machine / for a build where you've not given Firefox permission to look at Safari history files
1. open Firefox
2. open settings/preferences
3. click "Import data"

ER:
dialog pops up quickly, no errors

AR:
dialog shows grey frames for a second or two, 11 errors appear in the browser console:

```
NS_ERROR_FILE_ACCESS_DENIED: Could not open connection to /Users/<username>/Library/Safari/History.db
    openConnection resource://gre/modules/Sqlite.sys.mjs:1336
MigrationUtils.sys.mjs:292:21
    innerGetRows resource:///modules/MigrationUtils.sys.mjs:292
 Error: Couldn't get rows from the Safari history database.
```

(the first error repeats 10 times)

The first error repeats at just over 100ms intervals, so I imagine we try 10 times at 100ms timeouts and fail each time.

I think for the Safari/History case we should probably catch this specific exception just when showing the dialog and deal with it.

On this machine, Safari also does not show up for me in the import dialog.
Bug: Firefox display incorrect after adjust to minimum width and reopen
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2023-06-09 12:15:02+00:00
Resolved: 2024-03-04 12:22:58+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

I adjust Firefox window to minimal width, then shut down the computer. At next time, I open computer and start Firefox. 


Actual results:

The window do not display in maximize. It shows in windowed, and the icon of maximize is the status in maximize, and click on it has no effect.


Expected results:

When I open Firefox, it should in maximize or windowed size.
Bug: Imported bookmarks from HTML are placed inside the Bookmarks menu and not on the Bookmarks toolbar > Imported from file as stated in the spec doc
Status: NEW
Priority: P3
Created: 2023-06-09 12:39:36+00:00
Resolved: 2023-06-15 16:52:11+00:00

**Found in**
* 115.0b3

**Affected versions**
* 116.0a1 (2023-06-08)
* 115.0b3











**Tested platforms**
* Affected platforms: Windows10 x64, Ubuntu 20.04, macOS 12
* Unaffected platforms: none

**Preconditions**
* browser.migrate.content-modal.enabled
* exported bookmarks.html file from another browser

**Steps to reproduce**
1. Open the new migration window and select `Bookmarks from HTML file`.
2. Import the .html file.






**Expected result**
* Bookmarks are imported to the Bookmarks toolbar folder titled “Imported from file” as stated in the [spec doc](https://docs.google.com/document/d/19sfXaaiZ5K9fyb6ku_9oJcdcZMqcrunMAIQPnbxMGgY/edit#heading=h.iiscwz92l0wx).

**Actual result**
* Imported bookmarks from HTML are placed inside the Bookmarks menu as they were before.

**Regression range**
* Not a regression, this happens without the new migration window enabled and with the implementation of the option to import bookmarks from HTML (bug 1833427).


**Additional notes**
* Attached a screen recording.
* I am setting the affected flags based on the implementation from bug 1833427, for the new migration window option, even if this behavior existed before. Feel free to change them if you feel otherwise.
* This was filled on request to help with the discoverability.
Bug: Previously imported number of bookmarks from HTML files are displayed when importing bookmarks HTML files again
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2023-06-09 13:20:27+00:00
Resolved: 2023-06-16 12:31:32+00:00

**Found in**
* 115.0b3

**Affected versions**
* 116.0a1 (2023-06-08)
* 115.0b3











**Tested platforms**
* Affected platforms: Windows10 x64, Ubuntu 20.04, macOS 12
* Unaffected platforms: none

**Preconditions**
* browser.migrate.content-modal.enabled
* exported bookmarks.html file

**Steps to reproduce**
1. Open the new migration window and select `Bookmarks from HTML file`.
2. Import the .html file.
3. Import again using the `Bookmarks from HTML file` option and observe the importing window.






**Expected result**
* Previously imported number of bookmarks is not displayed.

**Actual result**
* Previously imported number of bookmarks is displayed.

**Regression range**
* Not a regression, it started happening with the implementation of Bookmark importing from HTML files (bug 1833427).


**Additional notes**
* Attached a screen recording.
* This is very hard to be seen on fast computers due to importing speed. It’s most visible on low-end computers.
Bug: Address bar with selected search engine: ? at start of search term is ignored
Status: VERIFIED
Priority: P3
Resolution: FIXED
Created: 2023-06-09 13:45:56+00:00
Resolved: 2024-05-15 12:52:50+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

Select search engine in address bar, e.g. Google.
Type ?qwe.
Press Enter.


Actual results:

Google searches for "qwe".


Expected results:

Google should search for "?qwe".
Bug: Signing out of Sync takes Firefox View back to mobile setup instead of showing a disconnected error
Status: RESOLVED
Priority: P3
Resolution: WONTFIX
Created: 2023-06-09 15:54:22+00:00
Resolved: 2023-11-24 16:25:22+00:00

This is legacy sync (but will impact new sync).

If you login to sync and go to view, you'll see synced tabs.

If you then logout, and go back to view, you'll get the mobile setup.

You shouldn't. You should get a message about being disconnected. This is happening because after you signout, lazy.UIState.get().status here - https://searchfox.org/mozilla-central/source/browser/components/firefoxview/firefox-view-synced-tabs-error-handler.sys.mjs#80 returns "not_configured"

We should add an extra check for the preference - services.sync.lastversion.

If that pref is set, the user was logged into sync at some point.
Bug: Firefox seems to use apple-touch-icon for bookmarks (again?)
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-06-09 17:36:07+00:00
Resolved: 2023-06-10 13:01:52+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

1. Load any website with both a normal favicon and apple touch icon.
2. Bookmark the page.


Actual results:

Firefox used apple-touch-icon instead of svg icon, I can see this because svg icon contains a theme based <style>, when my browser is in dark mode it's supposed to be a white svg.

However, apple-touch-icon is a large png file, it does not change colour.


Expected results:

All other browser would choose to use default icon, not apple-touch-icon. Even Safari would not use apple-touch-icon.
Bug: Diagcab file extension = Executable files may contain viruses or other malicious code
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2023-06-09 19:52:10+00:00
Resolved: 2024-05-30 18:10:40+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 Edg/113.0.1774.42

Steps to reproduce:

Create Diagcab file. 

Download In Firefox Browser And Open From Firefox Browser 

No " Executable files may contain viruses or other malicious code that could harm your computer "


Actual results:


Diagcab File Comes Under harmful files. 

Diagcab file extension Should Be blocklisted to prevent users To Open Directly from Firefox Browser 

Diagcab file extension Leads to One-Click Exploits in Windows

This File is Already Blocklisted In Chrome & Edge Browsers
Bug: Firefox 114 crashes on start (MUSL LIBC) [segfault]
Status: RESOLVED
Priority: --
Resolution: WORKSFORME
Created: 2023-06-09 20:39:07+00:00
Resolved: 2023-07-13 16:57:06+00:00

Steps to reproduce:

I just opened firefox on gentoo linux (musl overlay). I have attached the back trace and hope this helps with debugging.


Actual results:

Firefox just crashed with segfault


Expected results:

Firefox should have opened
Bug: Esc key won't close the searchbar when searchbar isn't focussed
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-06-10 00:29:07+00:00
Resolved: 2023-08-06 01:04:41+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

1. visit a website, example https://www.mozilla.org/
2. open searchbar with LCtrl+F
3. enter some letters in search-field
4. mark some text on the website or click on any empty space in the website
5. hit "Esc" on keyboard


Actual results:

nothing


Expected results:

searchbar should close
Bug: Firefox fails to open per-app Default Apps settings page for the first time if the app is not installed via the installer
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2023-06-10 09:26:07+00:00
Resolved: 2023-06-10 21:39:48+00:00

Steps to reproduce:
1. Make sure Firefox is neither registered for the user nor the machine. (For example, create a brand new Windows 11 VM.)
2. Run Firefox from a zip build.
3. Set `browser.shell.setDefaultBrowserUserChoice` pref to false.
4. Try to Set Firefox as Default from Firefox UI.

Actual result:
The top of Default Apps page will open.

Expected result:
Per-app default settings page should open.
Bug: Solid lines are shown dashed
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2023-06-10 10:29:23+00:00
Resolved: 2024-11-22 12:33:26+00:00

More info available in https://github.com/mozilla/pdf.js/issues/16540 and https://github.com/mozilla/pdf.js/issues/16038.

Using mozregression, I found the following regression range https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=940a3ad12e3dc9b2809b02f6a8ac8e941a50d2a1&tochange=ef13365d8188c453af959b13198818f6dbffc833, which points to bug 1711106.
Bug: Exploitation of User Trust through Back button or History page
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-06-11 11:49:37+00:00
Resolved: 2024-05-30 18:10:46+00:00

Description:
By initially opening a legitimate website (https://google.com) and then replacing the URL when on back button of browser trigger direct download link to an executable file  eg. (http://pub.agrarix.net/Windows/7-zip/7z922.exe), the script tricks users into unknowingly downloading a file  or load malicious link without their consent or awareness.

Tested on :
Latest version of firefox for win desktop version

Impact:
The impact of this vulnerability includes:

Unauthorized File Download: Users are subjected to an automatic file download without their knowledge or consent.
Potential Malware Distribution: Users may unknowingly download and execute malicious files, exposing their systems to malware or other harmful code.
Risk of Phishing Attacks: The deceptive behavior of the script can be leveraged to trick users into downloading files that appear to be legitimate but are designed to collect sensitive information or perform phishing attacks.
Exploitation of User Trust: By opening a trusted website initially and then switching to a completely unrelated and potentially harmful download, the vulnerability undermines user trust in the web page and its intentions.


Exploit & Steps to Reproduce:
To exploit this vulnerability, an adversary can follow these steps to reproduce the issue:

1. Access the vulnerable web page using a compatible browser.
2. Click on the "Open Google" button.
3. Observe that a new window/tab is opened, seemingly navigating to https://google.com.
4. click on back button , After a delay of 2 seconds, the URL is replaced with http://pub.agrarix.net/Windows/7-zip/7z922.exe.
5. Notice that the browser automatically triggers a file download without user consent.
Bug: Update Enterprise policies documentation link in about:policies
Status: RESOLVED
Priority: P3
Resolution: FIXED
Created: 2023-06-11 15:48:27+00:00
Resolved: 2023-06-20 17:19:52+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

Enter about:policies#documentation and click on some of the Enterprise policies link


Actual results:

Redirected to https://github.com/mozilla/policy-templates/blob/master/README.md
Seems documentation has moved.


Expected results:

Redirect to https://mozilla.github.io/policy-templates/
Bug: Previous windows and tabs lost if private window is open
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-06-11 16:25:33+00:00
Resolved: 2023-06-26 14:59:22+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

1. Select "Open previous windows and tabs" in settings
2. Open several tabs (set "a")
3. Open some further tabs, in a private window
4, Close main window
5. Reopen Firefox


Actual results:

Firefox opens, but previous windows and tabs (set "a") are lost

(is 1435594 related?)


Expected results:

Firefox opens, previous windows and tabs (set "a") are restored
Bug: I can search anything using google, but the searching "cult of the blood gods" or "cult of the blood gods vampire the masquerade" etc has a glitch. the results show for a split second and then disppear.
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2023-06-11 19:38:34+00:00
Resolved: 2023-06-11 22:56:10+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0

Steps to reproduce:

I just searched the phrase "cult of the blood gods vampire the masquerade" or similar phrases trying to find out about the book on Google. this issue does not appear with other searches, even ones including "cult of the", or other searches including vampire the masquerade. This issue does not appear in Chrome.


Actual results:

The results of the page completely dissapear after a split second, leaving a page devoid of results, even without a next page button. the images tab etc all work, but the search results dont.


Expected results:

I should see the results of my search on Google.
Bug: Amazon sponsored shortcut appears again when enabling and disabling the "sponsored shortcuts" option
Status: UNCONFIRMED
Priority: P3
Created: 2023-06-11 21:31:00+00:00
Resolved: 2023-08-19 03:17:27+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

1. Clear all sponsored shortcuts, including the Amazon one
2. Go to Settings > Shortcuts
3. Disable the "Sponsored shortcuts" option
4. Enable the "Sponsored shortcuts" option again 


Actual results:

The Amazon shortcut will appear again. Most of the time, the shortcut of Amazon search appears. However, once the Amazon website shortcut appeared again instead of the search shortcut.


Expected results:

No sponsored shortcuts reappearing when re-enabling the "Sponsored shortcuts" option.
Bug: The App crash all time with the new update 116.0a1
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-06-12 03:11:46+00:00
Resolved: 2023-06-12 22:13:17+00:00

User Agent: Mozilla/5.0 (Linux; Android 13; SAMSUNG SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/21.0 Chrome/110.0.5481.154 Mobile Safari/537.36

Steps to reproduce:

The last update when open the app crash all time, don't open


Actual results:

Close the app


Expected results:

The app continue working