av9ash/GitBugs huggingface dataset:
Bug: Cannot remove flexible space (toolbarspring) on the toolbar when vertical tabs are displayed
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2025-02-19 10:17:14+00:00
Resolved: 2025-03-04 22:11:18+00:00

Hello there! 

As a user, I usually like to have the largest URL bar displayed. To do so, I customize my toolbar to remove the flexible spaces. When I activate vertical tabs, a flexible space reappears and I cannot delete it. 

## Steps to reproduce

1. Remove flexible spaces (aka toolbarspring) from toolbar
2. Activate vertical tabs

## Expected results 

Vertical tabs are displayed and toolbar doesn't add a new flexible space

## Actual results 

Vertical tabs are displayed but an irremovable empty space appears. See attached video.
Bug: Sidebar gets shrunk after leaving toolbar customization
Status: NEW
Priority: P2
Created: 2025-02-19 10:31:52+00:00
Resolved: 2025-02-20 11:47:00+00:00

Found this minor bug while investigating bug 1949136. 

## Steps to reproduce

1. Have vertical tabs displayed in a way tab titles are visible
2. Customize the toolbar
3. Quit toolbar customization by clicking Done. 

## Expected results 

Firefox brings you back to the tab you were on and the sidebar doesn't change. 

## Actual results 

Firefox brings you back to the tab you were on but the sidebar is shrunk. See attached video
Bug: Firefox crashes when uploading multiples files/folder with multiple files via file picker without the agent running
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2025-02-19 12:29:41+00:00
Resolved: 2025-02-25 09:45:47+00:00

**Found in**
* 137.0a1 (2025-02-19)

**Affected versions**
* 137.0a1

**Preconditions**
* Download the DLP test assets from https://drive.google.com/file/d/1yjqVRuxdKV3WnO7D2wzMgDXBuYBxUgVw/view 
* Create a distribution folder inside the Firefox folder and paste the policies-2.json to it and then rename it to policies.json

**Tested platforms**
* Affected platforms: Windows 10/11

**Steps to reproduce**
1. Go to https://mdn.github.io/learning-area/html/forms/file-examples/simple-file.html 
2. Click the "Browse" button and select at least 2 files from your device
3. Click “Open” and observe the behavior

**Expected result**
*  Firefox should not crash

**Actual result**
*  Firefox is crashing

**Regression range**
* Mozregression points to bug 1936020

**Additional notes**
* See the attached video
* Also reproducing with policies-4.json but not with policies-1/-3/-5/-6/-7/-8
* Also reproducing when uploading a folder with at least 2 files (https://developer.mozilla.org/en-US/docs/Web/API/HTMLInputElement/webkitdirectory )
* Not reproducing if the agent is running
* Crash report: https://crash-stats.mozilla.org/report/index/f502b2cc-6803-482c-a4ac-c54a60250219#tab-details
Bug: Cannot move a tab at the bottom of the vertical tabs if the last item of the list is an open tab group
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2025-02-19 13:29:43+00:00
Resolved: 2025-02-21 12:23:25+00:00

Hello there! 

## Steps to reproduce

1. Have a tab and then a group of tabs
2. Move the tab below the group of tabs

## Expected results

Depending on where the mouse cursor is, I should be able to either drop the tab in the group or outside of the group

## Actual results

I can only move the tab into the group. I'm not able to move it below the group. See attached video.

## Known workaround

Collapse the tab group to move your tab below the group. Then expand the tab group again.
Bug: Blocked dialog displayed when pasting from clipboard after canceling the DLP scan in gsheets
Status: NEW
Priority: P4
Created: 2025-02-19 13:36:33+00:00
Resolved: 2025-03-04 14:43:42+00:00

**Found in**
* 137.0a1 (2025-02-19)

**Affected versions**
* 137.0a1

**Preconditions**
* Download the DLP test assets from https://drive.google.com/file/d/1yjqVRuxdKV3WnO7D2wzMgDXBuYBxUgVw/view 
* Create a distribution folder inside the Firefox folder and paste the policies-1.json to it and then rename it to policies.json
* Run the DLP agent in CMD using: .\content_analysis_sdk_agent.exe --user --toblock=.\d{3}-?\d{2}-?\d{4}. --towarn=.warn. --delays=10

**Tested platforms**
* Affected platforms: Windows 10/11
* Unaffected platforms: Ubuntu, macOS

**Steps to reproduce**
1. Go to https://drive.google.com/drive/home and open a Google Sheet
2. Copy any random text and paste it inside the gsheet using ctrl+V (only click once on the desired cell)
3. Press the “Cancel” button from the “Scan in progress” dialog and observe the behavior

**Expected result**
* The scan is canceled and no other dialogs are displayed

**Actual result**
* “You’re not permitted to paste this content” dialog is displayed

**Regression range**
* Mozregression points to bug 1936020

**Additional notes**
* See the attached video
* Not reproducing on other pages (including on other gdocs) or if double-clicking on the cell before pasting
* The content is allowed in cmd
Bug: Unsafe content still pasted after canceling scan if previously allowed in gsheets
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2025-02-19 13:56:28+00:00
Resolved: 2025-02-21 17:08:10+00:00

**Found in**
* 137.0a1 (2025-02-19)

**Affected versions**
* 137.0a1
* 136.0b7
* 135.0.1

**Preconditions**
* Download the DLP test assets from https://drive.google.com/file/d/1yjqVRuxdKV3WnO7D2wzMgDXBuYBxUgVw/view 
* Create a distribution folder inside the Firefox folder and paste the policies-1.json to it and then rename it to policies.json
* Run the DLP agent in CMD using: .\content_analysis_sdk_agent.exe --user --toblock=.\d{3}-?\d{2}-?\d{4}. --towarn=.warn. --delays=10

**Tested platforms**
* Affected platforms: Windows 10/11
* Unaffected platforms: Ubuntu, macOS

**Steps to reproduce**
1. Go to https://drive.google.com/drive/home and open a Google Sheet
2. Copy and paste the “warning text” in gsheet using ctrl+V (only click once on the desired cell)
3. When the “This content may be unsafe” dialog appears, select “Use content”
4. Paste again the “warning text” into a different cell, but this time cancel the scan
5. Observe the behavior

**Expected result**
* Since the scan was canceled, the text should not appear in the selected cell

**Actual result**
* The text is pasted even though the scan was canceled

**Regression range**
* Mozregression points to bug 1936223

**Additional notes**
* See the attached video
* Not reproducing on other pages (including on other gdocs) or if double-clicking on the cell before pasting
Bug: The blocked dialog is displayed two times when pasting blocked content inside google sheets without double clicking the cell
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2025-02-19 13:57:03+00:00
Resolved: 2025-02-20 21:15:42+00:00

**Found in**
* 137.0a1 (2025-02-18)

window 

**Affected versions**
* 137.0a1 (2025-02-18) 








**Tested platforms**
* Affected platforms:  Windows 10x64, Windows 11
* Unaffected platforms: Ubuntu 24, macOS


**Preconditions**
* Download the DLP test assets from https://drive.google.com/file/d/1yjqVRuxdKV3WnO7D2wzMgDXBuYBxUgVw/view
* Create a distribution folder inside the Firefox folder and paste the policies-1.json to it and then rename it to policies.json
* DLP Agent is running: `.\content_analysis_sdk_agent.exe --user --toblock=.*\d{3}-?\d{2}-?\d{4}.* --towarn=.*warn.* --delays=10`

**Steps to reproduce**
1. Paste the `123456789` string inside the Google sheet without double-clicking the cell.
2. Click the `OK` button on the blocked dialog.



****Expected result****
* The blocked dialog is dismissed.

**Actual result**
* The blocked dialog is still displayed.


**Regression range**
*  Pushlog: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=c80af2c447cdbbcdebb37be169e21929621c6a23&tochange=7fa38ea9fb7c240ecc364f19437ea32db0f32af8

**Additional notes**
* This happens from external programs as well.
* Attached a screen recording.
Bug: Saved and Closed Tab groups are not restored to the List all Tabs panel with Session Restore
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2025-02-19 14:04:27+00:00
Resolved: 2025-02-27 13:05:37+00:00

**Found in**
* Nightly 137.0a1 (2025-02-19) 

**Affected versions**
* Nightly 137.0a1 (2025-02-19) 
* Beta 136.0b7

**Affected platforms**
* All

**Steps to reproduce**
1. Create a Tab group.
2. Save and Close the Tab group.
3. Close Firefox and start it again.
4. Restore session from History

**Expected result**
* Tab Groups should be displayed in the List all Tabs menu after a session restore.

**Actual result**
* The list all tabs menu is empty.

**Regression range**
Not a regression.
Bug: OS notifications for the uploaded files are still displayed after closing the browser when the agent is not running
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2025-02-19 14:11:20+00:00
Resolved: 2025-02-19 19:43:18+00:00

**Found in**
* 137.0a1 (2025-02-19)

**Affected versions**
* 137.0a1
* 136.0b7
* 135.0.1

**Preconditions**
* Download the DLP test assets from https://drive.google.com/file/d/1yjqVRuxdKV3WnO7D2wzMgDXBuYBxUgVw/view 
* Create a distribution folder inside the Firefox folder and paste the policies-1.json to it and then rename it to policies.json
* Create a folder with multiple files of any type

**Tested platforms**
* Affected platforms: Windows 10/11
* Unaffected platforms: Ubuntu, macOS

**Steps to reproduce**
1. Go to https://developer.mozilla.org/en-US/docs/Web/API/HTMLInputElement/webkitdirectory or any website that allows folder uploads
2. Upload the folder from prerequisites and quickly close the browser
3. Observe the behavior

**Expected result**
*  After closing the browser, no OS notifications should appear for the uploaded files

**Actual result**
*  OS notifications for the uploaded files are still displayed after closing the browser

**Regression range**
* Mozregression points to bug 1915351

**Additional notes**
* See the attached video
Bug: Hovering over a Tab group inside the address bar should show a tooltip of the entire Tab group name
Status: NEW
Priority: P3
Created: 2025-02-19 14:50:49+00:00
Resolved: 2025-02-24 16:19:38+00:00

**Found in**
* Nightly 137.0a1 (2025-02-19) 

**Affected versions**
* Nightly 137.0a1 (2025-02-19) 
* Beta 136.0b7

**Affected platforms**
* All

**Steps to reproduce**
1. Create a Tab group with a long name.
2. Type the first letter of the Tab group name in the Address bar.

**Expected result**
* We should see the entire Tab group name when hovered over similar to URLs.

**Actual result**
* The Name of the Tab group is truncated.

* This seems more of an enhancement than an actual bug, but the Tab group name is truncated in the Address bar dropdown.

**Regression range**
Not a regression.
Bug: Error message for network connection should not be displayed on Type tab.
Status: RESOLVED
Priority: P1
Resolution: FIXED
Created: 2025-02-19 15:13:04+00:00
Resolved: 2025-02-21 17:04:21+00:00

**Found in**
* version: 137.0a1

**Affected versions**
* version: 137.0a1

**Tested platforms**
* Affected platforms: Windows
* Unaffected platforms: 

**Preconditions**
* precondition :  have pref pdfjs.enableSignatureEditor set to true

**Steps to reproduce**
1. Open a pdf document.
2. Open the signature dialog and go to Image tab.
3. Select to add an invalid document (Eg. .zip).
4. Move to Type tab and check the error message.

**Expected result**
* Error message should not be displayed if modal tab is changed, this error message should only be displayed on Image tab.

**Actual result**
* Error message should not be displayed.

**Regression range**
* Not a regression as it was recently implemented.

**Additional notes**
* Error message remains on modal every time I open it, until it gets closed.
Bug: Keyboard navigation loses focus from the Tab strip on Ubuntu 24
Status: NEW
Priority: --
Created: 2025-02-19 15:33:20+00:00
Resolved: 2025-02-19 16:41:10+00:00

**Found in**
* Nightly 137.0a1 (2025-02-19) 

**Affected versions**
* Nightly 137.0a1 (2025-02-19) 

**Affected platforms**
* Ubuntu

**Steps to reproduce**
1. Have a few tabs opened in the Tab strip
2. Use Tab key to reach the Tab strip and then Left/Right Arrows to navigate between the tabs.

**Expected result**
* The Keyboard focus should remain on the Tab strip and the user should move freely with the Left and Right Arrows.

**Actual result**
* Focus jumps on the page Content or Url bar.
The Keyboard focus looks like its still on the Tab but Left / Right Arrows stop working.
Using Shift + Tab in order to reach the Tab strip again does not always work.

**Regression range**
This only occurs in our latest Nightly build but its hard to reproduce on ubuntu while trying to get a regression range:
https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=ef11a9be8e754e9e4121384b26fce3c7803898d0&tochange=86db950c775f19a8ee252c4fe99a62abdcb0f2a4

Here is a push log of the issue but ill try to grab another one
Bug: User should be able to view what is typing, but while VoiceOver is on the signature can be visible only on the description field.
Status: NEW
Priority: --
Created: 2025-02-19 15:34:35+00:00
Resolved: 2025-02-21 21:15:11+00:00

**Found in**
* version: 137.0a1

**Affected versions**
* version: 137.0a1

**Tested platforms**
* Affected platforms: Mac 12.6
* Unaffected platforms: Windows, Ubuntu

**Preconditions**
* precondition :  have pref pdfjs.enableSignatureEditor set to true

**Steps to reproduce**
1. Open a pdf document.
2. Open the signature dialog and Type tab.
3. Open VoiceOver and move cursor on Type your signature then  start typing a signature.

**Expected result**
* User should be able to view what is typing, but while VoiceOver is on the signature can be visible only on the description field.

**Actual result**
* Type your signature is displayed on top of your signature while VoiceOver is on this field.

**Regression range**
* Not a regression as it was recently implemented.
Bug: [Windows] "Mozilla VPN" and "Relay" options are missing from the FxA Sync menu
Status: NEW
Priority: --
Created: 2025-02-19 15:57:49+00:00
Resolved: 2025-02-19 15:57:49+00:00

**Found in**
* 136.0b7

**Affected versions**
* 137.0a1
* 136.0b7
* 135.0.1
* 128.7.0esr

**Tested platforms**
* Affected platforms: Windows 10/11
* Unaffected platforms: Ubuntu, macOS

**Steps to reproduce**
1. Sign into Sync with an existing account or create a new one
2. Open the FxA Sync Menu from the Avatar icon
3. Observe the options from the menu

**Expected result**
* "Mozilla VPN" and "Relay" should be displayed under the "Try other protection tools from Mozilla" section

**Actual result**
* "Mozilla VPN" and "Relay" are not displayed under the "Try other protection tools from Mozilla" section

**Regression range**
* I am unable to determine the regression range as these options are not displayed on older builds as well

**Additional notes**
* See the attached screenshot
* Not reproducing on Ubuntu and macOS
Bug: aria-description does not auto-translate on iframe
Status: NEW
Priority: --
Created: 2025-02-19 16:13:17+00:00
Resolved: 2025-02-20 00:32:38+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0

Steps to reproduce:

1. Use a non-Dutch version of the OS and browser (I use English)
2. Visit: https://adrianroselli.com/demos/aria-description-dutch/
3. Inspect the rendered HTML and accTree to find all cases of `aria-description`
4. Use Firefox to auto-translate the page into your language
5. Inspect the rendered HTML for the iframe with `aria-description`
6. Observe it has not translated.


Actual results:

The `aria-description` on the `<iframe>` did not auto-translate. Specifically this code:

```
<iframe
  title="Hoe te voldoen aan Niet-tekstuele content"
  aria-description="Engelstalige inhoud">
</iframe>
```


Expected results:

The `aria-description` on the `<iframe>` should have auto-translated, just as the `aria-description` on the link and button did.

For additional context:
* I used the W3C Dutch translation to get that text, so it's not generated from auto-translation services.
* The embedded iframe in the dialog probably won't load, which has no bearing on this demo.
Bug: Smart Tab Grouping topic model uses incorrect keywords in topic model
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2025-02-19 16:16:54+00:00
Resolved: 2025-02-20 09:05:25+00:00

The Smart Tab Grouping topic model uses the c-tf-idf algorithm to find unique keywords in a group of tabs and use that to pass to a generative model.

Currently the keywords aren't being sourced correctly from the c-tfidf response.
Bug: Choosing the option to "Pin Firefox to taskbar" in new profile onboarding does nothing in Microsoft Store installs of Firefox
Status: RESOLVED
Priority: P3
Resolution: FIXED
Created: 2025-02-19 19:33:19+00:00
Resolved: 2025-03-04 05:02:39+00:00

If you install Firefox from the Microsoft Store, or in an existing Microsoft Store install create a new profile or merely browse to about:welcome, you are presented with an option to "Pin Firefox to taskbar and start menu". Choosing this option should produce a Windows OS notification prompting you to confirm the pinning request. Currently in Firefox 135 no such prompt is shown, and Firefox is not pinned to the taskbar. Firefox is pinned to the Start menu. 

1. Install Firefox from the Microsoft Store and launch it
2. Check the "Pin Firefox to taskbar or start menu" option (for simplicity you might also uncheck the other options)
3. Press "Save and continue"

Expected: A prompt from Windows seeking approval to pin Firefox to the taskbar
Actual: Nothing happens. No prompt, no pinning. 

Note: Happens on Windows 10 and Windows 11
Bug: Set arbitrary query parameters for manually typed URLs using pushState
Status: NEW
Priority: P3
Created: 2025-02-19 20:20:42+00:00
Resolved: 2025-02-24 16:29:12+00:00

Arbitrary query parameters can be added to URLs that are manually typed into the address bar by using the window.history.pushState() method. This exploit requires that the user does not re-check the URL after typing, but I think it is common that users look at the keyboard while typing and press the return key to visit the typed URL without re-checking it.

An example web page for testing the exploit is https://rulmer.xyz/demo/demo.html; it contains roughly this HTML:

<!DOCTYPE html>
<html lang="en">
  <body>
    <script>
      function f() {
        window.history.pushState(null, null, "?q=site:phishing.com Mozilla Forum");
      }
      setTimeout(f, 2000);
    </script>
  </body>
</html>

Here is how the exploit works; a demonstration can be found in the attached video:
- Open a website containing the malicious code.
- Click into the address bar before 2s have passed (or any other delay that the malicious code is using).
- The whole URL will automatically be selected.
- Wait briefly. Malicious query parameters are now appended to the URL, but are not automatically selected. The user might not notice this, if, e.g., their eyes are already looking at the keyboard.
- Now type a different URL and press the return key.
- The newly typed URL will now be visited, but the query parameters will also be used unbeknownst to the user.

This exploit could be used for very different exploits and it's impact depends on the URL that is visited after the malicious web page. It could be used to trigger an undesired action at the URL, inject XSS code for a vulnerable page or anything else that can be done with query parameters. I have constructed one example in the attached video, where a site filter is applied to a DuckDuckGo query, which could lead to phishing.

PS: The exploit also works with window.location="#..." instead of window.history.pushState(...), but the impact is lower with URL fragments.
Bug: The "Add new signature" button is not localized in RTL builds
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2025-02-19 21:27:40+00:00
Resolved: 2025-02-20 13:35:47+00:00

**Found in Version:**
- 137.0a1

**Affected Versions:**
- 137.0a1

**Tested Platforms:**
- **Affected:** Windows, Ubuntu, Mac
- **Unaffected:** None

**Preconditions:**
- Make sure to have pdfjs.enableSignatureEditor set to true
- An RTL build is used (e.g. Arabic or Hebrew).

**Steps to reproduce:**
1. Open a PDF file.
2. Click on the Signature icon in the toolbar to open the signature doorhanger.
3. Observe the "Add New Signature" button.

**Expected Result:**
- The "Add new signature" button should be localized like the other buttons in the Signature modal.

**Actual Result:**
- The "Add new signature" button remains in English, while other elements in the Signature modal are correctly localized.

**Regression Range:**
- Not a regression, as the feature was recently implemented.

**Attachments:**
- Screenshot showing the issue
Bug: Tablist container for browser tabs also includes a New Tab button while only tabs are expected
Status: NEW
Priority: --
Created: 2025-02-19 22:12:11+00:00
Resolved: 2025-02-19 22:12:11+00:00

[Tablist](https://w3c.github.io/aria/#tablist) container, per the ARIA specs, is expected to include [tab](https://w3c.github.io/aria/#tab) elements only, while the `+` ("Open a new tab") element that is the last element in the "Browser Tabs" tablist container is a button. 

***Possible solution:***
* move the New Tab button out of the tablist and wrap it in a `role="group"` container (or other grouping like a list). This would also follow the logic of the existing keyboard navigation pattern:
    * `Tab` key moves the focus from a tab to the New Tab button and then 
    * `Right Arrow` focuses the `V` ("List all tabs") button outside of the tablist.
Bug: Firefox Review Checker appears to freeze the whole browser
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2025-02-20 02:18:38+00:00
Resolved: 2025-02-20 02:37:22+00:00

Steps to reproduce:

It appears that Firefox Review Checker is completely freezing the browser at times while browsing Amazon.com.  The browser becomes completely unresponsive, and does not display any mouse-over effects when moving the cursor over a tab.  It cannot switch tabs, and cannot open a new tab.  Disabling the Review Checker restores functionality.
Bug: Firefox translation ignores "Always offer to translate" setting
Status: NEW
Priority: --
Created: 2025-02-20 05:11:54+00:00
Resolved: 2025-02-20 05:11:54+00:00

The "Always offer to translate" option on the translation door hanger does not work.

__Actual__:
The translation button is not shown if only a part of the content is written in the native language.
For example, with the JA version of the browser, the translation button is not shown if the UI in the content is in the native language (Japanese) and the main content is in another language (English).

__Expected__:
Always show the translation button in the address bar (without showing the door hanger).
It's better to see the "Always offer to translate" configuration in the "[More Translation Settings](about:preferences#translations)" preference.
Bug: The "Add new signature" button is not focused using the keyboard
Status: NEW
Priority: --
Created: 2025-02-20 06:38:05+00:00
Resolved: 2025-02-27 04:08:48+00:00

**Found in Version:**
- 137.0a1

**Affected Versions:**
- 137.0a1

**Tested Platforms:**
- **Affected:** Windows, Ubuntu, Mac
- **Unaffected:** None

**Preconditions:**
- Make sure to have pdfjs.enableSignatureEditor set to true

**Steps to reproduce:**
1. Open a PDF file.
2. Click on the Signature icon in the toolbar to open the signature doorhanger.
3. Use the Tab key to navigate through the buttons in the signature modal.
4. Observe the focus of the "Add new signature" button.

**Expected Result:**
- The "Add new signature" button should be focusable using the keyboard, similar to the other buttons in the signature doorhanger or modal and as per [Figma specs](https://www.figma.com/design/Ri2EZhwzFOxPqebpuS3bYc/PDF.js%3A-Signatures?node-id=1237-22660&p=f&t=cFY5SFX0WmLmYUTf-0).

**Actual Result:**
- The "Add new signature" button does not receive the blue focus when navigating using the keyboard.

**Regression Range:**
- Not a regression, as the feature was recently implemented.

**Attachments:**
- Screencast showing the issue