av9ash/GitBugs huggingface dataset:
Bug: Javascript bitwise AND (&=) changes variable
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2024-04-13 04:27:00+00:00
Resolved: 2024-04-13 04:31:48+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0

Steps to reproduce:

<script>
let x =7;


document.getElementById("demo").innerHTML = 
(x &= 1) + "<br>" + 
(x  &= 2 )+ "<br>" + 
(x &=4)+ "<br>" + 
(x );
</script>


Actual results:

After the first bitwise operation, variable x is set to 1 (i.e. the result). The Value of x should not be changed by this test, as it then fails the next 2 tests which it should pass. The result is :
1
0
0
0


Expected results:

The result should have been :
1
2
4
7
{Version 115.9.1esr (64 bit)}
Bug: Firefox fails to load any webpage after interacting with Bitwarden addon popup
Status: RESOLVED
Priority: --
Resolution: WORKSFORME
Created: 2024-04-13 07:39:54+00:00
Resolved: 2024-08-21 11:47:22+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0

Steps to reproduce:

1. Get the Bitwarden addon for Firefox: https://addons.mozilla.org/pl/firefox/addon/bitwarden-password-manager/, allow it to work in Private Mode

2. Launch Firefox in Private Mode, click on the Bitwarden addon icon on the Firefox bar

3. Observe the Bitwarden popup fails to load correctly: instead of displaying a password field, it either shows an empty white popup or no popup appears

4. Try to load any webpage, either from saved bookmarks or by typing the address in

5. Observe the Firefox browser not being able to show any webpage


Actual results:

1. The Bitwarden popup fails to load in, not allowing me to log into the webpages I had passwords stored in it

2. The Firefox browser is unable to load any webpage after interacting with Bitwarden popup, forcing me to restart the Browser completely


Expected results:

1. Bitwarden popup should display the regular log in prompt, asking me to provide thte main password to my vault

2. Even if Bitwarden addon fails to work correctly, I should be able to browse webpages without issue after dismissing the popup
Bug: Bookmarks Toolbar Drag Tab to Folder Only Works From Right
Status: NEW
Priority: P3
Created: 2024-04-13 11:03:05+00:00
Resolved: 2024-10-14 15:57:49+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0

Steps to reproduce:

I noticed this for almost a year now. When trying to drag a tab into a folder of the bookmarks toolbar, the folder opens up only when the mouse cursor dragging starts farther right than the folder in the ui. 

I attached a screen recording to demonstrate. 

- Have bookmarks menu open with folders left and right of a tab
- Try to drag a tab into a folder in the bookmarks menu


Actual results:

- If the mouse cursor starts dragging from a position farther right than the folder, the folder opens and allows adding the bookmark there. 
- If the mouse cursors starts dragging from a position farther left than the folder, the folder does not open and adding the bookmark like that is not possible. 


Expected results:

The bookmark should be added via drag and drop regardless from where the mouse cursor starts dragging the tab.
Bug: (security) Firefox executes JavaScript that is embedded in HTML code masquerading as a PDF document
Status: RESOLVED
Priority: --
Resolution: WONTFIX
Created: 2024-04-13 15:31:30+00:00
Resolved: 2024-07-02 08:57:15+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36

Steps to reproduce:

Visited this page:  https://cafevanbommel.nl/menu/

Noticed this “PDF” menu:  https://cafevanbommel.nl/wp-content/uploads/2023/11/Van-Bommel-Menukaart-November-2023-FOOD.pdf

Since I am on a measured rate network, it’s important that I see the size of a file before fetching it, particularly with a PDF menu because with food pics menus can get quite big. So I ran this:

$ torsocks curl -LI 'https://cafevanbommel.nl/wp-content/uploads/2023/11/Van-Bommel-Menukaart-November-2023-FOOD.pdf'

Output showed that the “PDF” file was only ~1k:

```
HTTP/2 200 
date: Tue, 09 Apr 2024 16:01:40 GMT
content-length: 1480
cache-control: no-cache, no-store, must-revalidate, max-age=0
cache-control: no-store, max-age=0
server: imunify360-webshield/1.21
```

So I fetched it with wget. It’s a fake!  It’s actually an application!  HTML-wrapped JavaScript is pretending to be a PDF doc. If I run that *application* to fetch the PDF I was deceived into thinking I was downloading originally, I have no way to first see how big the file is. So I had to go to the library to fetch the file just in case it’s really big.


Actual results:

Firefox 102.6.0esr fetched a file with a “PDF” extension that instead of containing PDF content actually contained JavaScript within HTML code. Firefox took the liberty of executing the JavaScript which ultimately fetched the real menu and rendered it, as unwitting users might expect.


Expected results:

Firefox should have either fed the “PDF” to pdf.js (which would correctly choke on it), or alternatively FF should have detected that the “PDF” is not really a PDF and warn the user. It should not have arbitrarily executed the JavaScript therein.

I mention security in the title because users are being deceived into executing a JavaScript application when in fact they think they are simply fetching a PDF. There should be a security review on this. But I’m not ticking the “security” box because any JavaScript pushed by the website would execute anyway, even without the use of a deceptive instrument. So this disclosure will not result in malice not otherwise possible.
Bug: Downloading takes more than 1 minute to start
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2024-04-13 20:30:56+00:00
Resolved: 2024-06-09 11:22:10+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0

Steps to reproduce:

 For about the past month 
- click a link
- wait for a long time with FF frozen
- the a wheel starts rotating
- after a full minute (or more) the save dialog appears.


Actual results:

waited it out


Expected results:

Prior to about a month ago, downloading worked as expected:
- click a link
- the save to... dialog opened
- choose the folder
- the download is off and running

Something has been broken in the mad-dash to push updates.
It's fine for browsing, but the, you need to download. At that point you wish you were using a different browser (any other browser, in fact) since FF is the only oe that has this problem.
Downloading works fine in a 8 chromium browsers that I have and in the 5 FF clones (like Waterfox)

It's just FF that's broken.
Bug: long title in tab hover preview not correctly truncated
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2024-04-14 18:09:09+00:00
Resolved: 2024-04-14 22:22:32+00:00

STR:

1. set browser.tabs.cardPreview.enabled to true
2. open https://www.youtube.com/watch?v=b-qO_9JmGJs
3. move the mouse over the tab

Actual:

You can see parts of a third line for the page title. See the attached screenshot.

Expected:

You can't see more than two lines for the page title.

Tested in Firefox Nightly 126.0a1 (2024-04-14) on macOS 14.4.1.
Bug: Tab title wiggles back and forth (saving/not-saving space for favicon) at startup
Status: NEW
Priority: P3
Created: 2024-04-14 21:06:41+00:00
Resolved: 2024-04-16 14:37:19+00:00

STR:
1. Start Firefox like so, assuming `/tmp/doesnotexist.html` is a file that does not exist:
```
firefox -profile /tmp/foo /tmp/doesnotexist.html
```
2. Watch the tab title carefully (or record a screencast and play it back in slow motion).

EXPECTED RESULTS:
Stable positioning for tab title, as the tab loads (and ultimately lands on a file-not-found error page).  If it needs to move due to presence/absence of favicon, that should happen at-most once.

ACTUAL RESULTS:
We go through these phases, with the title jumping left, right, left, right (via N/Y/N/Y below), i.e. with 3 position-changes between a left-aligned title to a title with space reserved for the favicon:
```
   Tab title               | Space reserved for favicon? Y/N
1. New Tab                 |        N
2. /tmp/doesnotexist.html  |        Y
3. /tmp/doesnotexist.html  |        N
4. Problem loading page    |        N
5. Problem loading page    |        Y
```
Bug: Starting a private window from windowless state restores the last closed tab
Status: RESOLVED
Priority: P2
Resolution: DUPLICATE
Created: 2024-04-15 02:02:21+00:00
Resolved: 2024-04-24 16:22:41+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0

Steps to reproduce:

Ensure the option to restore previous tabs on startup is turned off.

Start a window, browse to some address, close it using Ctrl+W (closing Firefox entirely).

Next, run "firefox --private-window" to start only a private window, browse to some address.

Finally, press Ctrl+N to start a new non-private window.


Actual results:

The new non-private window will contain as a first tab whichever tab you closed last.

The tab is an "unloaded" state, i.e. it will only load the webpage if you navigate to it.


Expected results:

This behavior is unexpected, undocumented, and undesired (potential privacy issue if the user deleted said tab from history).
Bug: WARNING: At least one completion condition is taking too long to complete. Conditions: [{"name":"ShieldRecipeClient: Cleaning up","state":"(none)","filename":"resource://normandy/lib/CleanupManager.sys.mjs","lineNumber":39 ..}]
Status: NEW
Priority: P3
Created: 2024-04-15 07:43:42+00:00
Resolved: 2024-08-26 06:49:13+00:00

This is a shutdown hang as it can be seen for the following job:
https://treeherder.mozilla.org/logviewer?job_id=453745674&repo=mozilla-central&lineNumber=4763-4767

```
[task 2024-04-06T10:55:45.096Z] 10:55:45     INFO - PID 32485 | WARNING: At least one completion condition is taking too long to complete. Conditions: [{"name":"ShieldRecipeClient: Cleaning up","state":"(none)","filename":"resource://normandy/lib/CleanupManager.sys.mjs","lineNumber":39,"stack":["resource://normandy/lib/CleanupManager.sys.mjs:cleanup:39","resource://normandy/Normandy.sys.mjs:uninit:161","resource:///modules/BrowserGlue.sys.mjs:_onQuitApplicationGranted/tasks<:2135","resource:///modules/BrowserGlue.sys.mjs:_onQuitApplicationGranted:2153","resource:///modules/BrowserGlue.sys.mjs:BG_observe:1120","resource:///modules/ContentCrashHandlers.sys.mjs:observe:165"]}] Barrier: profile-before-change
[task 2024-04-06T10:55:50.095Z] 10:55:50     INFO - PID 32485 | console.error: (new Error("SessionFile is closed", "resource:///modules/sessionstore/SessionFile.sys.mjs", 438))
[task 2024-04-06T10:56:36.096Z] 10:56:36     INFO - PID 32485 | FATAL ERROR: AsyncShutdown timeout in profile-before-change Conditions: [{"name":"ShieldRecipeClient: Cleaning up","state":"(none)","filename":"resource://normandy/lib/CleanupManager.sys.mjs","lineNumber":39,"stack":["resource://normandy/lib/CleanupManager.sys.mjs:cleanup:39","resource://normandy/Normandy.sys.mjs:uninit:161","resource:///modules/BrowserGlue.sys.mjs:_onQuitApplicationGranted/tasks<:2135","resource:///modules/BrowserGlue.sys.mjs:_onQuitApplicationGranted:2153","resource:///modules/BrowserGlue.sys.mjs:BG_observe:1120","resource:///modules/ContentCrashHandlers.sys.mjs:observe:165"]}] At least one completion condition failed to complete within a reasonable amount of time. Causing a crash to ensure that we do not leave the user with an unresponsive process draining resources.
[task 2024-04-06T10:56:36.097Z] 10:56:36     INFO - PID 32485 | [Parent 32485, Main Thread] ###!!! ABORT: file resource://normandy/lib/CleanupManager.sys.mjs:39
```
Bug: Session not restored,  "state.windows[0] is undefined" logged in the console
Status: NEW
Priority: P2
Created: 2024-04-15 09:52:50+00:00
Resolved: 2025-01-20 13:25:31+00:00

Started Firefox Nightly after starting my mac, and instead of restoring my session I have a new session created and no option to restore the previous session. The "Open previous windows and tabs" preference is still selected, and I saw this error in the console: 

``` 
SessionStore: The session file is invalid: TypeError: can't access property "hidden", state.windows[0] is undefined SessionStore.sys.mjs:1162:19
    initSession resource:///modules/sessionstore/SessionStore.sys.mjs:1162
    onBeforeBrowserWindowShown resource:///modules/sessionstore/SessionStore.sys.mjs:2005
```

And [this ](https://searchfox.org/mozilla-central/rev/d23849dd6d83edbe681d3b4828700256ea34a654/browser/components/sessionstore/SessionStore.sys.mjs#1162) is where that error is logged in `initSession`. Interestingly, I still have all of my recently closed tabs and recently closed windows restored, so it seems to be the action of actually restoring the session in the last step that might be broken.
Bug: On Nightly, error in Browser Console : can't access property "isAdoptingTab", this.window.gBrowserInit is undefined
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2024-04-15 16:19:33+00:00
Resolved: 2024-04-15 16:35:25+00:00

Use my daily profile
Start the browser
Open the browser Console

AR: I see a message

21:46:56.730 can't access property "isAdoptingTab", this.window.gBrowserInit is undefined ext-browser.js:1118:9
    get activeTab chrome://browser/content/parent/ext-browser.js:1118
    candidates chrome://extensions/content/parent/ext-tabs-base.js:2105
    InterpretGeneratorResume self-hosted:1412
    next self-hosted:1333
    query chrome://extensions/content/parent/ext-tabs-base.js:2127
    next self-hosted:1333
    from self-hosted:533
    query chrome://browser/content/parent/ext-tabs.js:1006
    result resource://gre/modules/ExtensionParent.sys.mjs:1152
    withCallContextData resource://gre/modules/ExtensionParent.sys.mjs:629
    result resource://gre/modules/ExtensionParent.sys.mjs:1151
    withPendingBrowser resource://gre/modules/ExtensionParent.sys.mjs:639
    result resource://gre/modules/ExtensionParent.sys.mjs:1150
    callAndLog resource://gre/modules/ExtensionParent.sys.mjs:1101
    recvAPICall resource://gre/modules/ExtensionParent.sys.mjs:1149
    AsyncFunctionNext self-hosted:799


ER: Maybe not so?
Bug: No indication to the user when pinning to the taskbar in welcome screens fails
Status: NEW
Priority: P2
Created: 2024-04-15 17:35:38+00:00
Resolved: 2024-05-08 15:55:24+00:00

At the moment, developer / beta builds of Windows block applications from pinning to the taskbar using older mechanisms for pinning. There is a newer API that can be used, but even when it is used, Windows still sometimes blocks pinning. There is currently no indication to the user that pinning was blocked.

To test, use a latest developer version of Windows (through the Windows Insider program), have Firefox installed and not pinned, do the onboarding / welcome flow (about:welcome) and ensure that pinning is checked before hitting save and continue.

If it still pins, try doing this many times in a row. It will eventually trigger windows blocking it and the user will not be notified.

In practice with the newer APIs in use, Windows still randomly seems to block pinning (without having done it many times already). I don't know what circumstances cause the block and they are not documented anywhere. With the newer API, there is a system notification confirming the user wants to pin first, and possibly Windows blocks it if they think the user has seen too many notifications.
Bug: Intermittent browser/components/firefoxview/tests/browser/browser_opentabs_cards.js | single tracking bug
Status: REOPENED
Priority: P5
Created: 2024-04-15 19:49:39+00:00
Resolved: 2025-03-03 07:04:02+00:00

**Filed by:** smolnar [at] mozilla.com
**Parsed log:** https://treeherder.mozilla.org/logviewer?job_id=454591141&repo=autoland
**Full log:** https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/XtGVKYYVTl2upHi7hWLfRA/runs/0/artifacts/public/logs/live_backing.log

---
```
TEST-PASS | browser/components/firefoxview/tests/browser/browser_opentabs_cards.js | One about:blank tab open at the end up test cleanup - ["about:blank"] deepEqual ["about:blank"] - 
[task 2024-04-15T19:31:20.921Z] 19:31:20     INFO - Leaving test bound open_tab_same_window
[task 2024-04-15T19:31:20.922Z] 19:31:20     INFO - Entering test bound open_tab_new_window
[task 2024-04-15T19:31:20.922Z] 19:31:20     INFO - Buffered messages logged at 19:27:47
[task 2024-04-15T19:31:20.923Z] 19:31:20     INFO - Longer timeout required, waiting longer...  Remaining timeouts: 2
[task 2024-04-15T19:31:20.923Z] 19:31:20     INFO - Buffered messages logged at 19:29:26
[task 2024-04-15T19:31:20.924Z] 19:31:20     INFO - Longer timeout required, waiting longer...  Remaining timeouts: 1
[task 2024-04-15T19:31:20.924Z] 19:31:20     INFO - Buffered messages finished
[task 2024-04-15T19:31:20.925Z] 19:31:20     INFO - TEST-UNEXPECTED-FAIL | browser/components/firefoxview/tests/browser/browser_opentabs_cards.js | Test timed out - 
[task 2024-04-15T19:31:20.926Z] 19:31:20     INFO - GECKO(5716) | Completed ShutdownLeaks collections in process 6668
[task 2024-04-15T19:31:20.926Z] 19:31:20     INFO - TEST-START | Shutdown
```
Bug: [Windows 11 Pro 23H2 | Firefox 124.0.2 (64-bit)] Selecting a Firefox tab from Taskbar causes it to restore (unmaximize)
Status: RESOLVED
Priority: P3
Resolution: INCOMPLETE
Created: 2024-04-15 20:26:43+00:00
Resolved: 2024-07-11 18:21:42+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0

Steps to reproduce:

Open Firefox
Maximize window
Open several tabs
Minimize window to the taskbar.
Select an open tab from the taskbar preview list


Actual results:

Window restored (unmaximized)


Expected results:

Windows should have stayed maximized
Bug: Intermittent browser/components/preferences/tests/browser_contentblocking_standard_tcp_section.js | single tracking bug
Status: RESOLVED
Priority: P5
Resolution: INCOMPLETE
Created: 2024-04-15 20:41:24+00:00
Resolved: 2024-05-15 12:03:58+00:00

**Filed by:** smolnar [at] mozilla.com
**Parsed log:** https://treeherder.mozilla.org/logviewer?job_id=454576888&repo=mozilla-central
**Full log:** https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/ZHBc3_CBQs2FW_FhvxoBxg/runs/0/artifacts/public/logs/live_backing.log

---
```
TEST-START | browser/components/preferences/tests/browser_contentblocking_standard_tcp_section.js
[task 2024-04-15T18:41:05.978Z] 18:41:05     INFO - TEST-INFO | started process screenshot
[task 2024-04-15T18:41:06.131Z] 18:41:06     INFO - TEST-INFO | screenshot: exit 0
[task 2024-04-15T18:41:06.132Z] 18:41:06     INFO - Buffered messages logged at 18:40:16
[task 2024-04-15T18:41:06.133Z] 18:41:06     INFO - Entering setup bound 
[task 2024-04-15T18:41:06.133Z] 18:41:06     INFO - Leaving setup bound 
[task 2024-04-15T18:41:06.135Z] 18:41:06     INFO - Entering test bound test_dfpi_disabled
[task 2024-04-15T18:41:06.135Z] 18:41:06     INFO - Testing TCP preferences section in standard {"dFPIEnabled":false}
[task 2024-04-15T18:41:06.136Z] 18:41:06     INFO - Buffered messages finished
[task 2024-04-15T18:41:06.136Z] 18:41:06     INFO - TEST-UNEXPECTED-FAIL | browser/components/preferences/tests/browser_contentblocking_standard_tcp_section.js | Test timed out - 
[task 2024-04-15T18:41:06.137Z] 18:41:06     INFO - GECKO(7760) | Completed ShutdownLeaks collections in process 8768
[task 2024-04-15T18:41:06.137Z] 18:41:06     INFO - TEST-START | Shutdown
```
Bug: I have discovered an open redirect vulnerability in Firefox version 124.0 that allows malicious redirection of users to arbitrary websites.
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2024-04-16 00:28:21+00:00
Resolved: 2024-05-30 18:26:40+00:00

Open Firefox browser (Version 124.0).
Enter the following URL in the address bar: https://example.com@dd.d.
Press Enter.
Note that the browser redirects to dd.d.
Affected URL:

Hostname: example.com
Subpage: N/A
Environment Details:

Firefox Version: 124.0
Operating System: All
Impact:
This vulnerability poses a significant risk to users as it can be exploited to redirect them to malicious websites without their knowledge, potentially leading to further exploitation or data theft.

Recommendation:
I recommend that the Firefox security team investigates and patches this vulnerability as soon as possible to protect users from potential exploitation.
Bug: when vs running with ff, cannot open a new app window
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2024-04-16 03:52:26+00:00
Resolved: 2024-05-13 14:47:50+00:00

Steps to reproduce:

visual studio running a app with open firefox


Actual results:

,then open firefox shortcut or open firefox on windows app menu ,cannot open a new  app  window 


Expected results:

open a new window
Bug: When pressing the ‘Make default’ button multiple times there is a delay in displaying the notification.
Status: NEW
Priority: P5
Created: 2024-04-16 11:41:29+00:00
Resolved: 2024-05-07 01:13:36+00:00

**Found in**
* version: 126.0a1

**Affected versions**
* version1: 127.0a1

**Tested platforms**
* Affected platforms: Windows 10/11
* Unaffected platforms: Mac, Ubuntu.

**Preconditions**
* Have Firefox installed

**Steps to reproduce**
1. Go to about:preferences and press on Make default button.
2. Repeat step1 multiple times.

**Expected result**
* ‘Finish making Nightly your default’ notification messages should be displayed each time.

**Actual result**
*  ‘Finish making Nightly your default’ notification messages are being displayed with a considerable delay, and sometimes not displayed at all.

**Regression range**
* Not a regression as this was recently added.

**Additional notes**
* Attached there are 2 screenshots from Win10 and Win11, which are slightly different.
Bug: Firefox poll in the bottom right of a new tab is missing text.
Status: UNCONFIRMED
Priority: --
Created: 2024-04-16 14:38:25+00:00
Resolved: 2024-11-04 12:29:10+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0

Steps to reproduce:

A small window appeared in the bottom right of a new tab in Firefox i.e. the default page that appears when opening a new tab. It contained a Firefox logo, and circular checkboxes that fill in with blue dots when selected. It had a next/submit button with text in the bottom right of it. The window appears in other new tabs, and still appeared when closing and reopening Firefox. This might have something to do with the "New Tab Microsurvey" study within about:studies.


Actual results:

I could select checkboxes, but no text was ever shown. I could not close the poll window without selecting an option and clicking the next/submit button. The window appears in other default new tabs, and still appeared when closing and reopening Firefox.


Expected results:

I should have been able to see text so I knew what I was selecting. As well, a clear close "X" button should be an option so that people can close the poll without worrying about selecting something that potentially could change browser setting, or without giving the developers false data about user's satisfaction with a feature.