av9ash/GitBugs huggingface dataset:
Bug: Make about:welcome progress bar animations hardware accelerated
Status: RESOLVED
Priority: P1
Resolution: FIXED
Created: 2022-12-29 20:21:08+00:00
Resolved: 2024-01-22 15:48:02+00:00

The cpuTime metric is [significantly impacted](https://treeherder.mozilla.org/perfherder/graphs?highlightAlerts=1&highlightChangelogData=1&highlightCommonAlerts=0&series=mozilla-central,4551069,1,13&series=autoland,4550641,1,13&timerange=2592000&zoom=1670853892259,1671204568186,858.1535349603961,1946.431233575765) by the changes in bug 1804726, which is probably due to the switch from transform to width. If that is the case then it seems likely the ContentfulSpeedIndex impact is a side effect of the software rendering. That would make sense if the impact is hardware dependent.

We can try using transform instead of width in a couple different ways and see what happens
Bug: "Confirm before quitting with Ctrl+Q" is not aligned with checkbox (Part 2)
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2022-12-29 21:26:42+00:00
Resolved: 2023-01-19 12:59:10+00:00

Steps to reproduce:
1) Set `browser.warnOnQuit` to `true` in about:config
2) Try quitting Firefox with Ctrl+Q shortcut

Actual results:
"Confirm before quitting with Ctrl+Q" is not aligned with checkbox

Expected results:
"Confirm before quitting with Ctrl+Q" is aligned with checkbox
Bug: Download notification icon has a black stroke
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2022-12-30 00:27:53+00:00
Resolved: 2023-01-05 03:43:54+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0

Steps to reproduce:

Regressed by 1807479

Download notification icon which is shown on hamburger menu has a black stroke now.
[notification-fill-12.svg - mozsearch](https://searchfox.org/mozilla-central/source/browser/themes/shared/icons/notification-fill-12.svg#5) has `fill="context-stroke"` but [indicator.css - mozsearch](https://searchfox.org/mozilla-central/source/browser/themes/shared/downloads/indicator.css#102) only has `fill`, so fallback color for `fill`, that is `black`, is applied.



Actual results:

notification icon with black stroke


Expected results:

notification icon without a stroke
Bug: Recently closed tabs are shown even when history preference is set to 'never remember history'
Status: REOPENED
Priority: P3
Created: 2022-12-31 13:35:16+00:00
Resolved: 2025-02-26 19:57:44+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:108.0) Gecko/20100101 Firefox/108.0

Steps to reproduce:

Turned off FIrefox (desktop) history and navigated to the 'Firefox View' tabl


Actual results:

The Firefox view tab includes history (even though turned off in browser and doesn't show up in history)


Expected results:

Firefox from a device with history turned off should not be included in the Firefox view, this is not communicated to users and seems to leak browser history even though history is turned off.
Bug: Incorrect favicon showing in bookmarks toolbar
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2022-12-31 16:33:19+00:00
Resolved: 2023-01-05 16:11:26+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:108.0) Gecko/20100101 Firefox/108.0

Steps to reproduce:

Drag tab to bookmarks toolbar.


Actual results:

Incorrect favicon is displayed in bookmarks toolbar.


Expected results:

The favicon in the tab should be used in the bookmarks toolbar.
Bug: Double save torrent files.
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2022-12-31 17:47:32+00:00
Resolved: 2023-01-05 16:02:09+00:00

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0

Steps to reproduce:

When downloading a torrent file, the browser duplicates the file in the download folder, despite the settings for such files 'use utorrent'. One copy of the file ends up in the folder assigned to utorrent (as it should be), and the second copy is in the folder assigned to downloads in the browser.
Bug: locked browser.toolbars.bookmarks.visibility does not stop user from changing the bookmark visibility
Status: NEW
Priority: P3
Created: 2022-12-31 18:01:43+00:00
Resolved: 2023-01-12 14:16:25+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:108.0) Gecko/20100101 Firefox/108.0

Steps to reproduce:

1. Locked the preference browser.toolbars.bookmarks.visibility to the value newtab
2. Pressed ctrl+shift+b


Actual results:

Firefox responded as if the preference was not locked. Not changing the preference, but still changing when the bookmarks bar is visible. When right-clicked, the bookmarks toolbar dropdown has 'only show on new tab' selected, even though it is set to always.

Clicking 'always show on new tab' does change the visibility back to newtab, and the other menu options do nothing.


Expected results:

Nothing; ctrl+shift+b should have been unable to change the visibility
Bug: windows builds failing with updater disabled with unable to find commonupdatedir.h
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2023-01-01 15:32:15+00:00
Resolved: 2023-01-05 21:38:12+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0

Steps to reproduce:

Tried to build with --disable updater and --enable-tests


Actual results:

The build failed


Expected results:

the build should have worked
Bug: "Confirm before closing multiple tabs" option is ignored when multiple windows are opened
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2023-01-01 19:20:18+00:00
Resolved: 2023-10-12 14:37:48+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0

Steps to reproduce:

First of all, enable the "Confirm before closing multiple tabs" under General - Tabs.

1. Open Firefox with a few tabs added to the window.
2. Create a new window and also add a few tabs to the new window.

Now, close any of the two windows. You should notice that there is absolutely no warning to confirm before closing.


Actual results:

The setting "Confirm before closing multiple tabs" is ignored with multiple windows opened.


Expected results:

Should give a warning box warning the user whether to confirm closing the windows.
Bug: Doesn't request any kind system password or mozilla account password when i access my saved logins and passwords page of mozilla browser.
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-01-02 09:10:59+00:00
Resolved: 2023-01-03 12:21:36+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0



Actual results:

Someone can easily watch my saved logins and passwords because it doesn't request any kind of system password or Mozilla account password.


Expected results:

When going to the saved login and password page browser should request a system password or Mozilla account password for showing them.
Bug: Divider line is still shown when Firefox View is disabled
Status: VERIFIED
Priority: P3
Resolution: FIXED
Created: 2023-01-02 16:20:59+00:00
Resolved: 2024-09-09 14:47:42+00:00

The divider line between Firefox View and the pinned tabs is still displayed when Firefox View is disabled.

STR:
set browser.tabs.firefox-view to false
Bug: Crash caused by pdfjs
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2023-01-02 16:49:44+00:00
Resolved: 2023-01-17 12:17:09+00:00

User Agent: Mozilla/5.0 (X11; Linux aarch64; rv:102.0) Gecko/20100101 Firefox/102.0

Steps to reproduce:

Every time I tried to view this PDF, Firefox 102.6.0esr (64-bit) for aarch64 crashed:

https://www.grc.com/sn/sn-863-notes.pdf

When I set pdfjs.annotationMode to 0, that seemed to mitigate the problem (for now).


Actual results:

Crash

I cannot debug the issue, because Firefox does not compile on the Raspberry Pi.


Expected results:

No crash ever.
Bug: Firefox Monitor est défectueux
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2023-01-02 16:54:03+00:00
Resolved: 2023-01-03 04:59:13+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0

Steps to reproduce:

I received information from Firefox Monitor with a link to Monitor. When I logged in, I came to a page that featured this: "502 Bad Gateway" and "openresty/1.15.8.2". I think there's a problem...  


Actual results:

Nothing  


Expected results:

Full information on the warning I received in my e-mail box.
Bug: Firefox Home Page always jumps up to put searches in the location bar regardless of having selected to have a separate search bar.
Status: RESOLVED
Priority: --
Resolution: WONTFIX
Created: 2023-01-03 01:45:05+00:00
Resolved: 2023-01-09 15:34:49+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0

Steps to reproduce:

Selected: Settings-->Home->New Tabs->Firefox Home (Default)
Selected: Settings-->Search-->Search Bar->add seach bar in tool bar

Placed cursor in seach text box (which showed DuckDuckGo logo and a ghosted "search the web" text. Started typing in the text box.


Actual results:

The cursor immediately jumped to the location bar, which began echoing the text and upon entry, launched the search with the data entered into the location bar/


Expected results:

Typing should remain in the text box, ( or should at least jump to the search bar).
*** This is a security problem. ***
Google started doing this with Chrome, presumably to track what people are searching from the specific browser, since it would be obvious on any traffic capture if the Chrome browser was relaying location URLs to Google.

Allowing the location bar to initiate search when the user has clearly indicated they do NOT want this is a strong implication that firefox is tracking searches as opposed to DuckDuckGo (or the selected search engine) tracking searches.
Bug: PDF.js shows an "x" in checkboxes in editable forms, even when the page has another glyph that it wants to use to represent the check
Status: RESOLVED
Priority: P3
Resolution: DUPLICATE
Created: 2023-01-03 10:20:40+00:00
Resolved: 2024-10-15 17:17:12+00:00

**Found in**
- Firefox 109.0b7

**Affected versions**
- Firefox 109.0b7
- Firefox 110.0a1

**Tested platforms**
- Affected platforms: macOS 13.1, Windows 11, Ubuntu 22.04

**Steps to reproduce**
1. Launch Firefox
2. Access this [PDF sample](https://eforms.com/download/2019/01/Business-Receipt-Template.pdf)
3. Tick some checkboxes from the Payment method
4. Print the edited page to PDF

**Expected result**
- The checkboxes have "x" inside when selected

**Actual result**
- The checkboxes have a bolded "-" inside

**Regression range**
- Will see for a regression.

**Additional notes**
- The issue can be seen in the attachment.
Bug: Location/language window pops-up everytime the page gets refreshed on costco.ca in Private
Status: RESOLVED
Priority: P3
Resolution: FIXED
Created: 2023-01-03 11:23:13+00:00
Resolved: 2024-03-04 15:24:54+00:00

**Environment:**
Operating system: Google Pixel 5 (Android 13)
Firefox version: Nightly 110.0a1-20230102165835

**Preconditions:**
• Private window opened
• VPN needed for users outside of Canada

**Steps to reproduce:**
1. Go to https://www.costco.ca
2. Enter a valid postal code (e.g. M4V2H7).
3. Navigate the website.
4. Observe the behaviour.

**Expected Behaviour:**
Language and Location pop-up appears only when the page is accessed for the first time.

**Actual Behaviour:**
Language and Location pop-up appears every time the page gets refreshed.

**Notes:**
1. Video provided
2. Reproducible on Firefox Release as well
3. Reproducible only in Private
Bug: The dynamic blocklist is applied even if the third party module blocking was disabled via the DisableThirdPartyModuleBlocking policy
Status: RESOLVED
Priority: --
Resolution: WONTFIX
Created: 2023-01-03 13:52:45+00:00
Resolved: 2023-01-17 10:17:25+00:00

**Found in**
* Firefox 110.0a1 (Build Id: 20230102165835)

**Affected versions**
* Firefox 110.0a1 (Build Id: 20230102165835)

**Tested platforms**
* Affected platforms: Windows 10 64bit

**Preconditions**
1. Have Google Drive for desktop installed (https://www.google.com/drive/download/)
2. Launch Firefox. 
3. Block the drivefsext.dll via the about:third-party page.
4. Restart Firefox.

**Steps to reproduce**
1. Disable the user-driven DLL blocking by using the following policy inside the policies.json file:
`{
"policies": {
"DisableThirdPartyModuleBlocking": true
}
}`
2. Restart Firefox.
3. Press ALT + F and select "Open File".
4. Access the about:third-party page and inspect the drivefsext.dll.

**Expected result**
* Step 3: The Google Drive entries have a little cloud overlay displayed.
* Step 4: The drivefsext.dll has the status of **Loaded**.

**Actual result**
* Step 3: No cloud overlay is displayed for the Google Drive entries.
* Step 4: The drivefsext.dll has the status of **Blocked**.

**Regression range**
* This is not a regression.
Bug: Opened tabs from first profile are not displayed in the Tab pickup section on second profile
Status: NEW
Priority: P3
Created: 2023-01-03 14:10:25+00:00
Resolved: 2023-01-11 14:17:40+00:00

**Affected Firefox versions**
* 109.0b7 (64-bit)

**Tested platforms**
* Windows 11;
* Windows 10;
* MacOS 12.5.1;

**Preconditions**
* Have 2 Firefox profiles with some tabs open;

**Steps to reproduce**
* Sign in to sync on profile 1;
* Sign in to sync on profile 2;
* Observe the Tab Pickup section from Fx View on both profiles;

**Expected result**
* Tab pickup section displays on profile 1 the tabs opened on profile 2 and vice-versa;

**Actual result**
* Only the Tab pickup section from profile 1 displays the opened tabs from profile 2;
* On profile 2 the tabs from profile 1 are not displayed only after browser restart;

**Notes**
* See attached video;
Bug: Intermittent browser/components/aboutlogins/tests/chrome/test_login_item.html | single tracking bug
Status: RESOLVED
Priority: P5
Resolution: INCOMPLETE
Created: 2023-01-03 15:02:34+00:00
Resolved: 2023-03-21 17:03:55+00:00

**Filed by:** nerli [at] mozilla.com
**Parsed log:** https://treeherder.mozilla.org/logviewer?job_id=401206984&repo=autoland
**Full log:** https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/egVUDZCySsSBuVwkY2XyCQ/runs/0/artifacts/public/logs/live_backing.log

---
```
[task 2023-01-03T13:41:40.557Z] 13:41:40     INFO - TEST-UNEXPECTED-FAIL | browser/components/aboutlogins/tests/chrome/test_login_item.html | origin input should have https:// prefix when not provided by user - got "www.example.com/bar", expected "https://www.example.com/bar"
[task 2023-01-03T13:41:40.557Z] 13:41:40     INFO - SimpleTest.is@chrome://mochikit/content/tests/SimpleTest/SimpleTest.js:487:14
[task 2023-01-03T13:41:40.557Z] 13:41:40     INFO - test_set_login_empty@chrome://mochitests/content/chrome/browser/components/aboutlogins/tests/chrome/test_login_item.html:322:7
[task 2023-01-03T13:41:40.558Z] 13:41:40     INFO - Not taking screenshot here: see the one that was previously logged
[task 2023-01-03T13:41:40.558Z] 13:41:40     INFO - TEST-UNEXPECTED-FAIL | browser/components/aboutlogins/tests/chrome/test_login_item.html | origin input should have https:// prefix when not provided by user - got "example.com/foo", expected "https://example.com/foo"
[task 2023-01-03T13:41:40.559Z] 13:41:40     INFO - SimpleTest.is@chrome://mochikit/content/tests/SimpleTest/SimpleTest.js:487:14
[task 2023-01-03T13:41:40.559Z] 13:41:40     INFO - test_set_login_empty@chrome://mochitests/content/chrome/browser/components/aboutlogins/tests/chrome/test_login_item.html:322:7
[task 2023-01-03T13:41:40.559Z] 13:41:40     INFO - Not taking screenshot here: see the one that was previously logged
[task 2023-01-03T13:41:40.560Z] 13:41:40     INFO - TEST-UNEXPECTED-FAIL | browser/components/aboutlogins/tests/chrome/test_login_item.html | Clicking the .save-changes-button should dispatch the AboutLoginsCreateLogin event 
[task 2023-01-03T13:41:40.560Z] 13:41:40     INFO - SimpleTest.ok@chrome://mochikit/content/tests/SimpleTest/SimpleTest.js:404:16
[task 2023-01-03T13:41:40.560Z] 13:41:40     INFO - test_set_login_empty@chrome://mochitests/content/chrome/browser/components/aboutlogins/tests/chrome/test_login_item.html:339:5
[task 2023-01-03T13:41:40.560Z] 13:41:40     INFO - add_task | Leaving test_set_login_empty
[task 2023-01-03T13:41:40.561Z] 13:41:40     INFO - add_task | Entering test_different_login_modified
```
Bug: Firefox Browser Spoofing Redirect URL
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2023-01-03 16:28:34+00:00
Resolved: 2024-05-30 18:03:37+00:00

#Summary 

Open Redirect is a security flaw of web sites, where a site accepts a URL that includes a request for redirection to another site, and performs that redirection without verifying the target site’s legitimacy. The site might support redirection for legitimate purposes, but when the redirection is open to any destination address, attackers can use it to engineer malicious links that look legitimate. Open Redirect URL in Browser high issue because if user not prevent about security could be impacted phising attack

#VERSION

Firefox Desktop Version macOS : 108.0.1 (64-bit)
Firefox Android Version : 108.1.1

This finding affected in Firefox Browser Desktop and Firefox Android.

#REPRODUCTION CASE

This is a script that will open a fullscreen window of the website "https://www.paypal.com/id/signin?locale.x=en_ID" when the "Spoofing Redirect URL" button is clicked. 
After 5 seconds, the fullscreen window will be closed and the current window will be redirected to "https://phising.site". 

For time can set time where ever to trust victim and then redirect to phising site, victim can input again where ever for critical victim input username and password site.

#POC

Im send detail script html and Video POC in Attachment

#MITIGATION

Blocking Redirect URL after open Full Screnn 

#CONCLUSION :

This could potentially be used to trick a user into thinking they are on a legitimate website, when in fact they are being redirected to a different site. 

The address bar is the main component used by web browsers to navigate the internet.  Keeping all software, especially update security web browsers, up to date is crucial to help prevent similar attacks.

#REFERENCE :
https://bufferzonesecurity.com/open-redirection-what-is-this-phishing-technique-and-how-do-i-defend-against-it/

#THANKS
Bug: Firefox Reverses the URL on Hebrew top level domain  (.ישראל) in HTTP sites.
Status: NEW
Priority: P3
Created: 2023-01-03 18:28:48+00:00
Resolved: 2023-03-02 16:26:26+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:108.0) Gecko/20100101 Firefox/108.0

Steps to reproduce:

Go to http://בדיקה.ישראל/https://google.com.
Look at the URL bar.


Actual results:

Firefox displays the site as it in google.com when your actually in בדיקה.ישראל. 
(Firefox highlight the right domain, but the domain shown as a path)
Note that this bug is not shown in HTTPS sites as כולנו.ישראל


Expected results:

Firefox (as chromium) should display "בדיקה.ישראל" as domain
Bug: [Session restore, Data loss] Outdated session loaded, sessionstore overwritten, tabs lost
Status: UNCONFIRMED
Priority: P2
Created: 2023-01-03 21:00:14+00:00
Resolved: 2023-12-08 17:23:44+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0

Steps to reproduce:

Reboot computer after crash.


Actual results:

Firefox started automatically after rebooting, but showing old tabs (showing previously-closed tabs/windows and missing recently-opened tabs), presumably from the 20th of december.

The files `sessionstore-backups/recovery.jsonlz4` and `sessionstore-backups/recovery.baklz4` have been automatically overwritten, so it's not possible to try recovering the tabs.

The file `sessionstore-backups/upgrade.jsonlz4-20221220102302` is exactly identical to `sessionstore-backups/previous.jsonlz4`, and presumably the file that was opened.

This has happened at least twice so far. At least the last time was after a reboot after the computer crashed.


Expected results:

Either the current tabs should have opened, or there should have been a warning that the tabs couldn't be opened. The `sessionstore-backups/recovery.jsonlz4` and `sessionstore-backups/recovery.baklz4` files certainly shouldn't get silently overwritten with outdated data.
Bug: updating from v.107 to v.108 lost all tabs appearance, color and display.
Status: RESOLVED
Priority: --
Resolution: WORKSFORME
Created: 2023-01-03 21:38:50+00:00
Resolved: 2023-01-23 16:44:55+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0

Steps to reproduce:

All I did was agree to update.
Updated from v.107 to v. 108.
I have been using Firefox for a very long time with only one continuing problem which occurred a few versions back:
Tabs always looked like actual folder tabs. With some Bugzilla guidance, I was able to have my "tabs on top" and also the active tab was in color. The only problem at the time was that the entire row of tabs would "vibrate"from side to side, but I was able to live with that. If the rightmost tab was active, the vibration of the entire row stopped.



Actual results:

Updating from v.107 to V.108 caused all "tabs" to disappear. Instead they are just written, side-to-side, near the top of the window with no tab-like appearance or color differentiation for the active tab. On a positive note, they now do not vibrate.


Expected results:

Please refer to 1st box, above.
Bug: Unable to separate system theme and browser theme for website appearance in FF106
Status: RESOLVED
Priority: --
Resolution: WONTFIX
Created: 2023-01-03 23:43:47+00:00
Resolved: 2023-01-23 16:05:46+00:00

Bug 1529323 introduced the ability to separate browser theme and system theme for website appearance using layout.css.prefers-color-scheme.content-override.

Bug 1788822 removed this ability in FF106.

I previously used layout.css.prefers-color-scheme.content-override = system, with the dark FF theme, to have website appearance follow the system theme but FF have a dark theme.

With the change in Bug 1788822 this is no longer possible as setting the browser theme to Dark in about:addons and setting Website appearance in about:preferences to Auto forces a Dark website appearance. Instead, I have to set the browser theme to system theme which is a regression because I explicitly want them separate. 

Please restore the option to separate the two in layout.css.prefers-color-scheme.content-override.

I pulled the product and component from Bug 1529323 where the option was first introduced.
Bug: Firefox ESR 102.6.0 64 bit pop up blocker exceptions not saving
Status: RESOLVED
Priority: --
Resolution: WORKSFORME
Created: 2023-01-04 00:04:38+00:00
Resolved: 2023-01-17 16:10:58+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0

Steps to reproduce:

Our environment has a GPO that disables the Firefox Pop Up Blocker, however, we allow users to change that setting if they wish.

When a end user enables the pop up blocker, this setting sticks after closing Firefox and reopening.  When an end user adds a URL exception to  the pop up blocker, the URL sticks while Firefox is open.


Actual results:

When you close Firefox and then open it, the URLs that were whitelisted in the last session have all disappeared.


Expected results:

The URLs should not have disappeared.