av9ash/GitBugs huggingface dataset:
Bug: Fix info icons in about:preferences#privacy
Status: RESOLVED
Priority: P1
Resolution: FIXED
Created: 2023-02-03 22:29:42+00:00
Resolved: 2023-02-06 21:39:21+00:00

It looks like some of the CSS changes that landed as part of Bug 1812335 broke some info icons that were still using XUL `image` in about:preferences#privacy. Updating all of these to `html:img` should be a quick fix.
Bug: Timeline on about:logins is vertical not horizontal
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2023-02-04 08:15:29+00:00
Resolved: 2023-02-25 00:00:01+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0

Steps to reproduce:

Please link this issue to -> 1805233
Open `about:logins`
Select an item


Actual results:

The timeline is pretty odd. And it's vertical with big circles.



Expected results:

The timeline should be horizontal
Bug: url/local/lnk/scf .download filename manipulation can be bypassed by using final newline or other sanitized characters
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2023-02-04 15:27:43+00:00
Resolved: 2024-05-30 18:05:04+00:00

Firefox has implemented a security measure aimed at protecting its users by replacing the download of malicious shortcut extensions, such as .url, .lnk, .scf, .local, and others, with the ".download" extension. However, it has been discovered that an attackers can use special character to bypass this filter.

A similar issue has been previously reported by me in Mozilla's bug tracking system (https://bugzilla.mozilla.org/show_bug.cgi?id=1810143) and has recently been addressed in the latest beta version of Firefox (110.0).

After conducting thorough testing on the latest version of Firefox, it has been determined that all dangerous extensions can still be downloaded using this bypass, indicating a lack of a filter to prevent this vulnerability. 

I have provided a proof of concept (poc.html) file that downloads .url. Using the special character '\n' bypass, you can directly modify the fileName variable to test other dangerous extensions, including .scf, .lnk, and .local.

Note: This vulnerability is of a more severe nature, given the ability of not only .url extensions, but also .scf, .lnk, and .local extensions to be downloaded as well.

Solution: Block special characters.
Bug: Crashing tabs on 109.0 while loading bigger web content (Videos, Javascript)
Status: RESOLVED
Priority: --
Resolution: WORKSFORME
Created: 2023-02-04 17:09:29+00:00
Resolved: 2023-02-06 13:01:02+00:00

Steps to reproduce:

try to open Nextcloud, Youtube, Invidious, Reddit, Stud.IP

This happens on Fedora RPM and Flatpak version


Actual results:

Tabs crash giving the "Gah. Your tab just crashed. We can help! Choose Restore This Tab to reload the page." constantly.

This happens with Tabs containing HTML5 videos but not only
Bug: switching languages in browser resets search-engine settings
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-02-04 19:36:38+00:00
Resolved: 2023-02-06 16:00:02+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0

Steps to reproduce:

check search-engine settings (and un-tick ALL search-engines in the list of engines, to not appear in search-suggestions). Then change language from english to another language, or vice versa. Check search-engine settings again.



Actual results:

in front of several search-engines, there are "ticks" now, so effectively, the language-change has messed with the search-engine settings...


Expected results:

Should not interfere with search-engine settings whatsoever! (and in general, should not interfere with ANY other settings!!!)
Bug: Firefox changes file extension of files when downloading them (mpg->mpeg, ts->tts)
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2023-02-05 00:07:01+00:00
Resolved: 2024-09-11 03:48:01+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0

Steps to reproduce:

Start a download from a file sharing site. For example, download one of the files in this folder: https://www.mediafire.com/folder/qdtcajn6ag94x/StepPrime_-_BGA_Generic


Actual results:

The resulting file contains a different file extension (.mpeg)


Expected results:

The resulting file should contain its actual file extension (.mpg)
Bug: Buttons rendered incorrectly for long URLs
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-02-05 08:10:51+00:00
Resolved: 2023-02-09 16:33:03+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0

Steps to reproduce:

long url in more info seems broken


Actual results:

i press on more info and the URLs are too long so the buttons are unusable 


Expected results:

the URLs should break to next line and then the buttons will be usable
Bug: text search on `about:addons`
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-02-05 10:32:45+00:00
Resolved: 2023-02-08 03:50:19+00:00

Steps to reproduce:

Open `about:addons`, press `ctrl-f`, type search string, press enter.


Actual results:

A new tab opened with search results on addons.mozilla.org.


Expected results:

See results for matching text on `about:addons`.
Bug: Randamly some tabs are found "New Tab" when open firefox from a saved session.
Status: UNCONFIRMED
Priority: P3
Created: 2023-02-05 19:27:52+00:00
Resolved: 2024-12-05 16:23:36+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0

Steps to reproduce:

Precondition:
Firefox settings "Open previous windows and tabs" checked.

Steps:
1. Launch Firefox.
2. Open many tabs with various urls. (Maybe 100+ tabs are easyly to reproduce.)
3. Close firefox with session saved.
4. Launch Firefox again.
5. Check the saved tabs from the Title bar of Firefox.


Actual results:

Randamly found some tabs are shown as "New tab" instead the original tab.
This causes the saved tab was lost since the last time.

Comments:
1. I have created a clean new firefox profile to reproduce this bug and succeeded.
2. Sometimes I found the missing tab was also not found in Firefox History, which indicates the url was not treated as a visited page though opened. This information maybe helpful.
3. I am a heavy user of firefox especially on saving an amount of (1000+) opend tabs and different profiles. This bug really makes a lot of trouble on recovering tabs from the last session and I have lost some of them. Firefox was not like this about half year ago. So I am eagerly wishing it fixed. Thank you!


Expected results:

All tabs from the saved last session should be recoved well and no missing.
Bug: Search results displayed from typing in the address bar don't have bookmark star
Status: RESOLVED
Priority: P3
Resolution: WORKSFORME
Created: 2023-02-05 19:49:10+00:00
Resolved: 2023-03-09 16:27:00+00:00

Step to reproduce:
1) Type text in the address bar.
2) Press enter to start the search.
3) Decide you want to continue the research later and click the bookmark star to save the search.

Expected result:
3) The bookmark dialog is displayed to save the URL as a bookmark.

Actual result:
3) Frustration and annoyance as no bookmark star is to be found.
Bug: swipe-to-navigate doesn't work correctly in RTL
Status: NEW
Priority: P3
Created: 2023-02-05 21:39:38+00:00
Resolved: 2024-02-11 00:13:35+00:00

1. Swiping right should go back
2. Swiping left should go forward
3. When swiping right (which should go back but actually goes forward), the icon appears on the right (good), but it's pointing to the left (bad)
4. When swiping left (which should go forward but actually goes back), the icon appears on the left (good), but it's pointing to the right (bad)
Bug: Ctrl+click doesn't open Google Docs link in background tab
Status: REOPENED
Priority: --
Created: 2023-02-06 04:11:07+00:00
Resolved: 2023-02-10 17:26:42+00:00

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0

Steps to reproduce:

1. Navigate to https://docs.google.com/document/d/1-21QT7yKqgoDH_-ph2Vblro4GV9mYAnKAhz5f0SIUHg/edit?usp=sharing
2. Mouse over the link to reveal the tooltip with the link title
3. Click on the link title in the tooltip


Actual results:

Link opens in new tab, and new tab gets focus


Expected results:

Link should open in new tab, but that tab should remain in the background and the current tab should preserve focus.
Bug: Slow tab closes
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2023-02-06 04:47:54+00:00
Resolved: 2023-04-01 00:29:37+00:00

​​### Basic information

Been noticing this for a little while now, and it is hard to track down what is going on. Disabled a bunch of extensions to see if I could resolve it, but seeing slow tab closes. 

Steps to Reproduce:

1. Open large restored session.
2. Close tab via ctrl-w

Expected Results:

Next tab opens quickly and loads.

Actual Results:

This seems to stutter and jank. 

---

### Performance recording (profile)

Profile URL: https://share.firefox.dev/3ldqnWz

#### System configuration:

OS version: Fedora 37
GPU model: Mesa Intel® UHD Graphics (TGL GT2)
Number of cores: 11th Gen Intel® Core™ i3-1125G4 × 8
Amount of memory (RAM):  64gb

### More information

Please consider attaching the following information after filing this bug, if relevant:

 - Screenshot / screen recording
 - Anonymized about:memory dump, for issues with memory usage
 - Troubleshooting information: Go to about:support, click "Copy text to clipboard", paste it to a file, save it, and attach the file here.

---

Thanks so much for your help.
Bug: Shutdown hang with: WARNING: At least one completion condition is taking too long to complete. Conditions: [{"name":"Remote Settings profile-before-change","state":"Remaining: 6 callbacks (importJSONDump ...)
Status: NEW
Priority: --
Created: 2023-02-06 07:57:37+00:00
Resolved: 2025-01-15 11:08:30+00:00

Seen in the following WebDriver test on Windows:

https://treeherder.mozilla.org/logviewer?job_id=404549320&repo=mozilla-esr102&lineNumber=2201-2202

```
[task 2023-02-03T21:58:28.446Z] 21:58:28     INFO - PID 3684 | JavaScript error: resource://gre/modules/JSONFile.jsm, line 138: AbortError: IOUtils.profileBeforeChange getter: IOUtils: profileBeforeChange phase has already finished
[task 2023-02-03T21:58:38.269Z] 21:58:38     INFO - PID 3684 | WARNING: At least one completion condition is taking too long to complete. Conditions: [{"name":"Remote Settings profile-before-change","state":"Remaining: 6 callbacks (importJSONDump-main-anti-tracking-url-decoration-1, importJSONDump-main-hijack-blocklists-2, importJSONDump-main-search-telemetry-v2-3, importJSONDump-main-search-config-4, importJSONDump-blocklists-gfx-5, importJSONDump-main-url-classifier-skip-urls-7).","filename":"resource://services-settings/RemoteSettingsWorker.jsm","lineNumber":201,"stack":["resource://services-settings/RemoteSettingsWorker.jsm:null:201","resource://services-settings/RemoteSettingsClient.jsm:_importJSONDump:806","resource://services-settings/RemoteSettingsClient.jsm:get/this._importingPromise<:356","resource://services-settings/RemoteSettingsClient.jsm:get:371"]}] Barrier: profile-before-change
```
Bug: Hidden (Exclude from Layout) PDF button should not be visible in the printed form.
Status: RESOLVED
Priority: P1
Resolution: FIXED
Created: 2023-02-06 11:18:50+00:00
Resolved: 2023-08-02 13:51:06+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.102 Safari/537.36

Steps to reproduce:

I opened a PDF file in a firefox tab. This PDF contains a form with hidden buttons (option Hidden (Exclude from Layout)). 

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/111.0



Actual results:

These hidden button are printed as grey boxes.


Expected results:

These hidden button should not be printed.

Extract from https://help.adobe.com/en_US/livecycle/11.0/DesignerHelp/WS107c29ade9134a2c583558f12a7dc955d9-8000.2.html:
Hidden (Exclude from Layout) The object is not visible on-screen, not visible in the printed form, and does not occupy any space in the form layout.

Chrome does not print theses hidden fields.
Bug: Extension sanitization (.lnk, .local) bypass using pipe (|)
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-02-06 11:53:30+00:00
Resolved: 2024-05-30 18:05:07+00:00

Currently, Firefox (1) removes all | operators from filenames. 

It also (2) renames any file ending with .lnk to .download. (https://www.mozilla.org/en-US/security/advisories/mfsa2022-30/#CVE-2022-36314)

The behaviour (1) can be used to bypass (2)

Example: The filename "test.lnk|||" will get saved as "test.lnk" which bypasses behaviour (2) even on the latest Nightly build 111.0a1 (2023-02-05) (64-bit)

Can test using:  https://haxatron-server.glitch.me/hashleak-2.html
Bug: [Experiment] Persist Search Tip is NOT triggered while enrolled in the experiment
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2023-02-06 14:42:55+00:00
Resolved: 2023-02-07 15:47:27+00:00

**[Notes]:**
- I think that this happens because even if the profile is enrolled in the experiment and has the feature enabled, the "browser.urlbar.showSearchTerms.featureGate" pref remains set to "false" (which is expected for an experiment). 
- Even if you restart the browser multiple times, the Persist Search Tip is not triggered.
- However, if we are enrolled in the experiment, and manually change the "browser.urlbar.showSearchTerms.featureGate" pref to true, the Persist Search Tip is displayed after a restart. 
- This issue is not reproducible on Nightly builds or early Beta builds, due to the fact that the feature is already enabled by default.

**[Affected versions]:**
- Firefox Beta 110.0b9.

**[Affected Platforms]:**
- Mac 12.4
- Windows 10 x64
- Linux Mint 20

**[Prerequisites]:**
- Have Firefox Beta 110.0b9 en-US build extracted/installed.
- Have the "nimbus.debug" set to true.

**[Steps to reproduce]:**
1. Open the Firefox browser with the profile from the prerequisites. 
2. Navigate to the [following URL](about:studies?optin_slug=persist-search-term-staged-rollout-phase-1&optin_branch=treatment-a&optin_collection=nimbus-preview), in order to force enroll in the experiment.
3. Restart the browser.
4. Open a new tab and perform a search.
5. Observe the behavior.

**[Expected result]:**
- The Persist Search Tip is displayed.

**[Actual result]:**
- The Persist Search Tip is NOT displayed.

**[Additional Notes]:**
- The issue is also reproducible by naturally enrolled in the experiment.
- I have attached a screen recording of the issue.
Bug: You have chosen to open: wrong filename in dialog
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-02-06 16:33:50+00:00
Resolved: 2023-02-06 17:48:20+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0

Steps to reproduce:


Downloading file from server, that sends header:
Content-Disposition: attachment; filename="16110819_9009645884_A_2021.pdf"


Actual results:

Browser shows correct filename  16110819_9009645884_A_2021.pdf in the download dialog box title, but wrong in the dialog box itself. See attached picture.


Expected results:

In title of dialog box and dialog box contents filename must be 16110819_9009645884_A_2021.pdf
Bug: Differently cased pdf extensions do not trigger the display of pdfjs feature callout
Status: RESOLVED
Priority: P1
Resolution: FIXED
Created: 2023-02-06 20:00:13+00:00
Resolved: 2023-02-09 16:12:20+00:00

Since the checks for `.pdf` in tabbrowser.js don't manipulate casing before happening, the feature callout is only ever displayed if the `.pdf` extension is in all lowercase. We should use something like `gBrowser.contentPrincipal?.originNoSuffix === "resource://pdf.js"` to eliminate edge cases surrounding extension naming, and potentially other edge cases we haven't thought of.
Bug: Menus in permission doorhangers open on hover rather than click
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2023-02-06 20:10:47+00:00
Resolved: 2023-03-03 13:35:23+00:00

Tested on macOS + Nightly 111.0a1 (2023-02-06) (64-bit)

STR:

1. Open https://permission.site
2. Click on the "Screen Share" button
3. In the permission doorhanger that opens mouse hover over the expand arrow of the "block" button.

Expected:
Nothing happens unless you click the arrow panel

Actual:
On hover the menu opens

Mozregression:
```
16:17.49 INFO: Last good revision: 0c989b2bcd7882a9e7106e7879ab8933c2e09071
16:17.49 INFO: First bad revision: 47c002d3637247e71ee901f32421deaecc9d8ea3
16:17.49 INFO: Pushlog:
https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=0c989b2bcd7882a9e7106e7879ab8933c2e09071&tochange=47c002d3637247e71ee901f32421deaecc9d8ea3
```
Bug: Increase of failed incoming records for the Passwords Sync Engine
Status: RESOLVED
Priority: P2
Resolution: FIXED
Created: 2023-02-06 21:48:34+00:00
Resolved: 2023-09-21 18:07:35+00:00

Starting around January 31st, there was an increased amount of incoming records failing for the Passwords engine and seems to be steadily increasing.
Bug: Intermittent TV browser/components/places/tests/browser/browser_library_bookmark_clear_visits.js | single tracking bug
Status: RESOLVED
Priority: P5
Resolution: INCOMPLETE
Created: 2023-02-06 23:50:07+00:00
Resolved: 2024-01-08 12:04:35+00:00

**Filed by:** abutkovits [at] mozilla.com
**Parsed log:** https://treeherder.mozilla.org/logviewer?job_id=404805746&repo=autoland
**Full log:** https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/PHufVHUkQw2dwyr2hglrEA/runs/0/artifacts/public/logs/live_backing.log
**Reftest URL:** https://hg.mozilla.org/mozilla-central/raw-file/tip/layout/tools/reftest/reftest-analyzer.xhtml#logurl=https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/PHufVHUkQw2dwyr2hglrEA/runs/0/artifacts/public/logs/live_backing.log&only_show_unexpected=1

---
```
[task 2023-02-06T22:23:21.917Z] 22:23:21     INFO - TEST-PASS | browser/components/places/tests/browser/browser_library_bookmark_clear_visits.js | Current view is shown - true == true - 
[task 2023-02-06T22:23:21.918Z] 22:23:21     INFO - Add Most Recent Visit column
[task 2023-02-06T22:23:21.918Z] 22:23:21     INFO - Check the initial content
[task 2023-02-06T22:23:21.919Z] 22:23:21     INFO - Buffered messages finished
[task 2023-02-06T22:23:21.920Z] 22:23:21     INFO - TEST-UNEXPECTED-FAIL | browser/components/places/tests/browser/browser_library_bookmark_clear_visits.js | All bookmarks are shown - 4 == 3 - JS frame :: chrome://mochitests/content/browser/browser/components/places/tests/browser/browser_library_bookmark_clear_visits.js :: folder :: line 50
[task 2023-02-06T22:23:21.920Z] 22:23:21     INFO - Stack trace:
[task 2023-02-06T22:23:21.920Z] 22:23:21     INFO - chrome://mochitests/content/browser/browser/components/places/tests/browser/browser_library_bookmark_clear_visits.js:folder:50
[task 2023-02-06T22:23:21.921Z] 22:23:21     INFO - TEST-PASS | browser/components/places/tests/browser/browser_library_bookmark_clear_visits.js | URL is correct - "https://example.com/" == "https://example.com/" - 
```
Bug: about:preferences "Default Font" menu gets unexpected text-selections inside of & around it, if you click and hold to open the menu
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2023-02-07 05:36:03+00:00
Resolved: 2023-03-15 15:10:10+00:00

STR:
1. Open Firefox preferences (`about:preferences`)
2. Type "font" into the search field
3. Left-click the dropdown menu for the default font, and **do not release the mousebutton**.
4. Still holding down your mouse button, move your mouse up and down to change the highlighted entry.  Move it side to side as well.

ACTUAL RESULTS:
As you move the mouse up and down over the menu, various entries seem to have their text selected (though it's only certain entries that are selectable like this, for some reason -- it always seems to be the same ones).

If you move the mouse side to side, the adjacent text (the "Size" label and the "Advanced" button) get selected as well.

EXPECTED RESULTS:
No such text-selection, when my extended click is really just trying to pick an entry from the menu.

mozregression range:
https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=0c989b2bcd7882a9e7106e7879ab8933c2e09071&tochange=47c002d3637247e71ee901f32421deaecc9d8ea3
--> Regression from Bug 1805414

I can reproduce in latest Nightly on macOS and on Linux (Ubuntu 22.04, with Wayland)
Bug: Downloads save automatically, no folder picker pop-up, despite "Always ask you where to save" checked
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2023-02-07 06:46:42+00:00
Resolved: 2023-03-01 04:54:16+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0

Steps to reproduce:

1. Download a link from Gmail, e.g. a PDF from Uber confirmation emails


Actual results:

Firefox saves the file without asking where.


Expected results:

Many similar bugs:

#713378
#1782416
#1799855
Bug: The website can know the URL you entered in the second tab if the two tabs are same-origin
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2023-02-07 06:57:21+00:00
Resolved: 2023-02-07 09:53:57+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36

Steps to reproduce:

On macOS Ventura 13.1, open Firefox, clear all the caches, re-start Firefox.

Load the first URL:

https://mdn.github.io/dom-examples/web-storage/event.html

In this website, the URL line has no value.

Open the second tab, load the second URL:

https://mdn.github.io/dom-examples/web-storage

Go back to the first tab where https://mdn.github.io/dom-examples/web-storage/event.html is, the URL line shows https://mdn.github.io/dom-examples/web-storage.


Actual results:

The first tab can know the second tab is loaded when the second URL is a sub-page of the first URL.


Expected results:

I don't know, I just concern about this behavior.
Bug: A frame of the PDF feature callout appears in the top left part of the page before the actual callout shows
Status: VERIFIED
Priority: P2
Resolution: FIXED
Created: 2023-02-07 07:11:24+00:00
Resolved: 2024-12-13 07:57:23+00:00

**[Affected versions]:**
- Firefox Nightly 111.0a1 (Buil ID: 20230206092409)
- Firefox Release Candidate 110.0 (Build ID: 20230206190557)
- Firefox Release 109.0.1 (Build ID: 20230127170202)

**[Affected Platforms]:**
- Windows 10 x64
- macOS 11.7.1
- Ubuntu 22.04

**[Prerequisites]:**
- Have the latest version of Firefox Nightly 111 installed and opened.
- Have the “browser.pdfjs.feature-tour” pref set to “{"screen":"FEATURE_CALLOUT_1_A","complete":false}” in the “about:config” page.

**[Steps to reproduce]:**
1. Navigate to a PDF page. (e.g. https://www.africau.edu/images/default/sample.pdf)
2. Observe the top-left corner of the page.

**[Expected result]:**
- No frame shows.

**[Actual result]:**
- A frame of the PDF feature callout appears.

**[Notes]:**
- This issue is also reproducible when dragging & dropping a PDF file to an existing tab.
- Attached is a screen recording of the issue.