av9ash/GitBugs huggingface dataset:
Bug: Firefox v114 fails to parse the Native Messaging Host manifest with BOM
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2023-06-16 16:35:34+00:00
Resolved: 2024-01-01 12:24:04+00:00

Steps to reproduce:

Our web extension communicates with our own native messaging host. The messaging host manifest file contains path to the host executable file; therefore it can contain non-ASCII characters and is stored in UTF-8 encoding with 3-bytes BOM in the beginning of the file.

Starting from version 116, Firefox complains about unrecognized JSON character at position 1 of the manifest and fails to parse it. Same manifests worked perfectly fine in the past. To confirm, Firefox was downgraded to version 112 and the same manifest file worked just fine.

https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Native_manifests


Actual results:

Starting from FF 114 (Windows) native messaging host manifest with UTF-8 BOM is not parsed.


Expected results:

Native messaging host manifests with UTF-8 BOM should be successfully parsed (Windows).
Bug: Parent has a case for "Translations:ReportDetectedLangTags" that is never sent
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2023-06-16 21:15:46+00:00
Resolved: 2023-06-30 18:35:29+00:00

It looks like bug 1837078 removed the place that sends 1837078 but not the code for handling "Translations:ReportDetectedLangTags" in the parent.
Bug: "Has control of your pointer" notification does not go away if you close the tab with "Ctrl+W"
Status: NEW
Priority: --
Created: 2023-06-16 22:08:28+00:00
Resolved: 2023-10-07 20:07:54+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

I got in a website which controlled my mouse pointer and I left the site with "Ctrl+W" with the mouse pointer still being controlled by the site.

How this could be reproduced?
1- Get on a website that starts controlling your mouse pointer and maybe but maybe full screen firefox on the site.
2- When the site starts controlling your mouse pointer, leave the site by pressing "ctrl+w"
3- That's about it! You have now an stuck "has control of your pointer" on your firefox.


Actual results:

Everytime you move your mouse up where this notification appears, it now appears the "sitename has control of your pointer. Press ESC to take back control", this issue does not go away until you decide to restart Firefox.


Expected results:

The notification shouldn't be appearing anymore considering I left the site and the mouse isn't being controlled anymore.
Bug: Mixed Content Issue - FireFox
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2023-06-17 10:25:16+00:00
Resolved: 2024-05-30 18:11:08+00:00

==============iamonhttps.html==============  https://secondtestingspace.000webhostapp.com/iamonhttps.html
File "iamonhttps.html" hosted on HTTPS Domain, his this iframe code  "data:text/html,%3Ciframe%20src%3D%22http%3A%2F%2F127.0.0.1%2Fiamonhttp.html%22%3E%3C%2Fiframe%3E". This src attribute specifies the source URL of the content to be loaded within the iframe.

In this case, the source URL is (HTTP Only) "http://127.0.0.1/iamonhttp.html", which is a local address (localhost) pointing to a file named "iamonhttp.html;" on the web server running on the local machine (127.0.0.1).

However, when I attempted to browse this from a HTTPS domain, it's loaded. 

#Expected Behaviour
It should not loaded due to mixed content

#Other Browser
Safari MacOS  -Not Affected. blocking this and throwing error of Mixed Content.
Chrome Browser - Vulnerable and Reported today only.
FireFox MacOS 114.0.1 (64-bit - Vulnerable
Firefox Android/iOS/Windows - Not Tested.
Bug: Custom thumbnail for newtab pinned tiles needs to be saved twice
Status: RESOLVED
Priority: P3
Resolution: DUPLICATE
Created: 2023-06-17 11:25:53+00:00
Resolved: 2024-08-30 13:24:31+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/116.0

Steps to reproduce:

1. Copy a link to some image 
2.  Open built-in newtab page
3. Click the options-button on some pinned tile
4. Select Edit
5. In the dialog select "Use custom image..." and paste the image link copied in step 1
6. Click Preview (wait for image to load)
7. Observe the preview being generated correctly
8. Click Save


Actual results:

The edited tile becomes blank.


Expected results:

The given custom image should be used for the tile.

Afterwards, if you open the Edit dialog again and simply click "Save" again the custom image starts to work correctly.
Bug: Remove hidden search engines
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2023-06-17 13:37:30+00:00
Resolved: 2023-06-17 15:06:41+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

My Firefox profile has been around for a pretty long time. In my `search.json.mozlz4` file, several search engines are listed but marked as “hidden”. Here’s an example showing Wikipedia search:

```
    {
      "_isAppProvided": true,
      "_metaData": {
        "alias": null,
        "hidden": true,
        "order": 4
      },
      "_name": "Wikipedia (en)",
      "id": "wikipedia@search.mozilla.orgdefault"
    },
```



Actual results:

In this situation, it appears close to impossible for the user to re-enable/unhide the relevant search engine:

* It is not listed in the dropdown in Settings → Search → Default Search Engine
* It is not listed in the listbox in Settings → Search → Search Shortcuts
* It cannot be enabled or installed using the usual green + icon in the search box
* It is not shown in the right-click menu of the location bar
* Even browser extensions, such as DuckDuckGo Security Essentials, fail when attempting to install their search engine.


Expected results:

Firefox should either ignore the “hidden” attribute entirely, making all the search engines show up again; or it should treat them as entirely absent, so that re-installing them from scratch will unhide them.

The easiest fix I can think of is for the next version of Firefox to just remove all the “hidden” search engines from the user’s `search.json.mozlz4` file. The user will not notice any difference, except that installing search engines now works where it previously didn’t.
Bug: Private saves session, nukes saved session of "regular" firefox
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2023-06-17 15:24:39+00:00
Resolved: 2023-07-12 16:55:13+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

Firefox with zillions of tabs
Private window sitting under a bunch of windows or on another work space.
Restart "regular" firefox (leaving Private firefox).
Session has been nuked.


Actual results:

Session has been nuked, restarted firefox has a generic home page.
History doesn't have the tabs (or they are so buried I can't find them)


Expected results:

DO NOT save save session for Private windows!
Save a session snap shot so I can restore some recent view, heck save several.
Give me a button so I can save a set of tabs to restore as "this is my starting point".

This problem bites me in the butt on a regular basis and I haven't found a fix.
Bug: All tabs list excruciatingly slow
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2023-06-17 20:35:32+00:00
Resolved: 2023-06-30 09:43:10+00:00

The "Show all tabs" list has become really sluggish after upgrading to 115.0b, perhaps due to bug 1620199. The highlighted row follows the mouse cursor with a lag, and scrolling the list is unbearably slow.
Bug: Intermittent browser/components/translations/tests/browser/browser_translations_panel_never_translate_language.js | single tracking bug
Status: RESOLVED
Priority: P5
Resolution: INCOMPLETE
Created: 2023-06-18 12:03:06+00:00
Resolved: 2024-06-24 12:01:35+00:00

**Filed by:** csabou [at] mozilla.com
**Parsed log:** https://treeherder.mozilla.org/logviewer?job_id=419754684&repo=try
**Full log:** https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/VyKGRl8fTcaac05BXbsI-w/runs/0/artifacts/public/logs/live_backing.log

---
```
[task 2023-06-18T10:54:45.375Z] 10:54:45     INFO - TEST-PASS | browser/components/translations/tests/browser/browser_translations_panel_never_translate_language.js | The page's H1 is in Spanish. - "Don Quijote de La Mancha" == "Don Quijote de La Mancha" - 
[task 2023-06-18T10:54:45.375Z] 10:54:45     INFO - Leaving test bound test_toggle_never_translate_language_menuitem_with_active_translations
[task 2023-06-18T10:54:45.376Z] 10:54:45     INFO - Entering test bound test_toggle_never_translate_language_menuitem_with_always_translate_active
[task 2023-06-18T10:54:45.376Z] 10:54:45     INFO - Buffered messages finished
[task 2023-06-18T10:54:45.377Z] 10:54:45     INFO - TEST-UNEXPECTED-FAIL | browser/components/translations/tests/browser/browser_translations_panel_never_translate_language.js | Visibility for "button" - Got false, expected true
[task 2023-06-18T10:54:45.377Z] 10:54:45     INFO - Stack trace:
[task 2023-06-18T10:54:45.377Z] 10:54:45     INFO - chrome://mochikit/content/browser-test.js:test_is:1608
[task 2023-06-18T10:54:45.378Z] 10:54:45     INFO - chrome://mochitests/content/browser/browser/components/translations/tests/browser/head.js:assertTranslationsButton:45
[task 2023-06-18T10:54:45.378Z] 10:54:45     INFO - chrome://mochitests/content/browser/browser/components/translations/tests/browser/browser_translations_panel_never_translate_language.js:test_toggle_never_translate_language_menuitem_with_always_translate_active:246
[task 2023-06-18T10:54:45.378Z] 10:54:45     INFO - chrome://mochikit/content/browser-test.js:handleTask:1131
[task 2023-06-18T10:54:45.378Z] 10:54:45     INFO - chrome://mochikit/content/browser-test.js:_runTaskBasedTest:1203
[task 2023-06-18T10:54:45.378Z] 10:54:45     INFO - chrome://mochikit/content/browser-test.js:Tester_execTest:1345
[task 2023-06-18T10:54:45.378Z] 10:54:45     INFO - chrome://mochikit/content/browser-test.js:nextTest/<:1120
[task 2023-06-18T10:54:45.378Z] 10:54:45     INFO - chrome://mochikit/content/tests/SimpleTest/SimpleTest.js:SimpleTest.waitForFocus/<:1056
[task 2023-06-18T10:54:45.378Z] 10:54:45     INFO - TEST-PASS | browser/components/translations/tests/browser/browser_translations_panel_never_translate_language.js | Visibility for "circleArrows" - 
```
Bug: Javascript HTML Zip File to Open Application
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2023-06-18 12:20:16+00:00
Resolved: 2024-05-30 18:11:11+00:00

#Summary

Open App Windows with javascript open via browser is huge security breach that would allow websites to execute commands on OS level.

#Scenario

Function script is generate file zip and automatic execute App 
I think this Exploitable RCE 

#Repro

Operating System : Windows 11
Firefox Version : 114.0.1 (64-bit)


Thanks
Bug: "Library" window: Cannot edit bookmarks / sort folder when previous view was "Downloads"
Status: VERIFIED
Priority: P2
Resolution: FIXED
Created: 2023-06-18 13:17:23+00:00
Resolved: 2024-01-26 13:15:47+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

* Open "Show All Downloads" from the main menu (if visible) or Ctrl-Shift-Y otherwise.
* Expand "All Bookmarks" if not already expanded.
* Select "Bookmarks Menu" or any of it's sub-folders.
* Select a bookmark.


Actual results:

* The bookmark editor at the bottom does not open.
* Right-clicking on the folder (in the tree pane) seems to have no effect.
* Manually sorting bookmarks by drag-and-drop seems to have no effect.


Expected results:

The bookmark editor should open, and both of the sorting operations should also have a visible effect.

If you switch to another folder and back (green arrow on top left), the editor opens again, and the results of the previously done sort operations become visible.

It happens on any folder that is selected right after "Downloads" and only to the first folder selected this way.
Bug: Cmd-Shift-T reopens last closed window, not last closed tab in current window
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2023-06-19 00:05:22+00:00
Resolved: 2023-09-01 14:16:19+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/116.0

Steps to reproduce:

Close a window
An already open window is now in focus
Cmd+Shift+T



Actual results:

Recently closed window reopens, not the last closed tab on the current window 


Expected results:

Last closed tab on the current window should have reopened

Looks like a regression from https://bugzilla.mozilla.org/show_bug.cgi?id=1833416
Bug: Overlapping buttons when resizing the Page info panel's height
Status: NEW
Priority: P5
Created: 2023-06-19 07:49:59+00:00
Resolved: 2023-09-11 19:31:10+00:00

**Found in**
* Beta 115.0b6

**Affected versions**
* Beta 115.0b7
* Nightly 116.0a1
* Release 114.0.1

**Tested platforms**
* Affected platforms: Windows 11 x64, Ubuntu 18.04 x64, macOS 11

**Steps to reproduce**
1. Launch Firefox and navigate to any webpage, e.g. https://www.reddit.com/
2. From the url bar, click on the lock icon -> "Connection secure" -> "More information", and select the "Media" tab.
3. Shrink the window's height to the minimum.
4. Observe the Page info "?" and the "Save as..." buttons.

**Expected result**
* The Page info "?" and "Save as..." button overlap each other. 

**Actual result**
* No overlapping while resigning the panel to the minimum height.

**Regression range**
* Pushlog_url: https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=425fd934f38510050f3cc721708511a3aef5a9fc&tochange=dc16834bdd96e0fc1c355848d5c79a02d9424943
* Potentially regressed by: Bug 1819267 

**Additional notes**
* Please observe this [screencast](https://drive.google.com/file/d/1f8hZdOFXpErjK-oh09ipNQHLHabT6VYs/view?usp=sharing) showing the issue on macOS
Bug: Learn more link cannot be focused using Tab/Shift+tTab keys
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2023-06-19 15:03:53+00:00
Resolved: 2023-07-19 15:55:32+00:00

[Found in]:
Nightly 116.0a1

[Affected Versions]:
Firefox Release 114.0.1
Firefox Beta 115.0b7 (Build ID: 20210323190052)
Firefox Nightly 116.0a1 (20230618)

[Affected Platforms]:
macOS 11.6.8

[Unaffected Platforms]:
Win 10

[Prerequisites]:
Have the latest Firefox browser installed and opened.
Set pref signon.management.page.fileImport.enabled  = true
Have the "Logins & Passwords" page opened.
Have selected a CSV file that doesn't contain URL/password/username column header.
Have the "Import Error" modal opened.

[Steps to reproduce]:

1.  Press the "Tab" key to move focus on Cancel button(The "Learn more" link from the "Import Error" modal is focused as default when this modal is triggered.)
2.  Press the "Shift+Tab"/"Tab" key until the "Learn more" link is focused.

[Expected result]:
The "Learn more" link is focused.

[Actual result]:
The "Learn more" link cannot be focused.

[Notes]:

Attached is a csv file for "Import error" modal. This issue is reproducible on Fx 113.0a1 too.
Bug: The taskbar tab previews are displayed as blank on a secondary monitor
Status: NEW
Priority: --
Created: 2023-06-19 15:07:02+00:00
Resolved: 2023-06-29 14:34:12+00:00

**Note**
* When the user enables "Show tab previews in the Windows taskbar" in settings and then hovers the Firefox icon on the taskbar, on a secondary monitor, he will notice that the tab previews are blank.

**Found in**
* Beta v115.0b7

**Affected versions**
* Nightly v116.0a1
* Beta v115.0b7
* Release v114.0.1

**Tested platforms**
* Affected platforms: Windows 10
* Unaffected platforms: ?

**Steps to reproduce**
1. Go to browser preferences.
2. Enable "Show tab previews in the Windows taskbar"
3. Open multiple random websites in different tabs.
4. Hover the Firefox icon on the SECONDARY monitor.

**Expected result**
* The tab previews are properly displayed.

**Actual result**
* The tab previews are BLANK.

**Regression range**
* unknown
Bug: The favicons are wrongly displayed above the title of the Sponsored suggestions
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2023-06-19 18:34:13+00:00
Resolved: 2023-07-05 14:42:23+00:00

**[Affected versions]**
- Nightly 116.0a1 (Build ID: 20230618205154)

**[Affected platforms]**
- Windows 10 x64
- macOS 13.1
- Linux Mint 20

**[Prerequisites]**
- Have the "browser.search.region" pref set to "US".

**[Steps to reproduce]**
1. Open the Nightly browser with the pref mentioned in the prerequisites. 
2. Type "amazon" in the awesome bar.
3. Observe the Sponsored suggestions from the last position.


**[Expected results]**
- The Sponsored suggestion is correctly displayed, the favicon and the title is displayed on the same row.

**[Actual results]**
- The favicon is displayed above the title of the Sponsored suggestion.

**[Regression]**
- This seems to be a regression, using the mozregression tools I have found that Bug 1837815 introduced this issue.

**[Notes]**
- Attached a screenshot of the issue.
Bug: Firefox 114 "Clear History" does not clear download history
Status: NEW
Priority: P3
Created: 2023-06-19 19:40:42+00:00
Resolved: 2024-08-01 17:46:20+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

Windows 11 installation, have NOT tested on any other platform:

(1) Existing, pre-114 installation of Firefox has (a) history set to 0 days, (b) "browsing and download history" checked in the Clear Recent History dialog (&lt;ctrl&gt;&lt;shft&gt;&lt;del&gt; or History | Clear Recent History). When Clear Recent History command is issued (hotkey or menu), download history is cleared.

(2) Install 114.x Firefox (64 bit Windows).


Actual results:

When Clear Recent History command is issued in Firefox 114.x, download history is NOT cleared. This has been tested with the checkbox selected, not selected, and toggled through a full cycle.

Clearing download history now requires going to the actual download history pane/popup and manually selecting "clear download history."


Expected results:

If the dialog window says that "clearing history" will also clear download history, that's what it should do. That is, in fact, what the default behavior should be.

This has persisted from 114.0 through 114.0.1 (Windows 64-bit).

A better design of that dialog would be to have SEPARATE ENTRIES for "browsing history" and "download history" in the first place. These two items SHOULD NOT be grouped for this purpose... especially when, in version 114.x, it appears that they are being processed separately under the hood. They should not, however, require separate clicks IF the user specifically chooses "When I clear my history, I want to clear BOTH my browsing history AND my download history."

This is a potential security issue that does not qualify for "being kept hidden from the public": Rather the opposite, the "public" needs to be aware of the bug so it can perform the additional work-around step of ALSO going into the download history and separately clearing it.
Bug: Tab crashes constantly on Google Image Search
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-06-19 21:24:55+00:00
Resolved: 2023-06-22 17:47:37+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

I do a plain vanilla search on Google, I switch over to see what images are associated with the search terms.


Actual results:

Page begins to render, then the tab crashes. Trying to restore tab keeps causing crash.
Other user has had the same issue, cf. https://support.google.com/websearch/thread/221293972/google-images-constantly-crashing?hl=en


Expected results:

Page should have rendered with the images related to the search terms.
Bug: Firefox doesn't use a symbolic icon in GNOME app menu
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2023-06-20 04:17:22+00:00
Resolved: 2024-08-22 12:45:08+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

1. Use GNOME (latest version, which is 44.2)
2. Use Firefox from Flathub or from the tar.bz2 file from the Mozilla website
3. Now Use Firefox from the repository of a Linux distro such as Fedora
4. Look at the app menu from the top bar


Actual results:

When using Firefox from Flathub or from the Mozilla website, the Firefox icon isn't symbolic. Instead, it's a regular Firefox icon, but desaturated.


Expected results:

Firefox using a symbolic icon in the app menu.
Bug: Download Dangerous Files in Hidden & Avoid Ui Dialog "Executable files may contain viruses. "
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2023-06-20 07:46:20+00:00
Resolved: 2023-07-19 09:26:32+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43

Steps to reproduce:

Firefox Version: [116.0a1] + [115.0beta]
Operating System: [Windows 10]

I Found an Interesting Vulnerability in Firefox Browser it Can Download Dangerous Files in Hidden Way and Can Execute File & Same Time Can Avoid Executable File Ui Dialog 

I think this Vulnerability is Very near to " 3 Click Exploit. "

To Reproduce: First Let's Create HTML File 

I Have Created Two Functions and the First Function is to Download a File Without Extension Ex:  MicrosoftOpenMe " Note: There is no Extension Here. "

second Function is to Download Dangerous File Ex: MicrosoftOpenMe.diagcab it Could be Any file.

in Background i Have Added Timer to Download Dangerous File


Actual results:

Now User Clik On [Button] 
"First MicrosoftOpenMe Download Completed " and The User Open the File Directly

The File Explorer Dialog Open 

On The Time of Opening File Explorer Dialog in Background Ex: MicrosoftOpenMe.diagcab gets Completed. Without knowing User/Victim

it will Show on File Explorer dialog = C:\Users\User\Downloads

Both Files 1. MicrosoftOpenMe 2. MicrosoftOpenMe.diagcab

Now User Will Try to Open MicrosoftOpenMe.diagcab 

Successfully Attacker try to gain Access Through this Vulnerability. 

I Have Attached POC Video Please Check it Out.
Bug: Investigate consecutive calls to setTree breaking the nodes parenting
Status: RESOLVED
Priority: P2
Resolution: FIXED
Created: 2023-06-20 08:06:20+00:00
Resolved: 2023-12-06 12:08:27+00:00

While investigating Bug 1839066 Emilio found that nodes parenting gets broken after consecutive  calls to setTree(null) and setTree(tree)
We should check what's up and add a test for that.

When this happens, various functions on the bookmarks may be broken.
Bug: Firefox stop respond when running js function
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2023-06-20 09:39:53+00:00
Resolved: 2024-11-01 11:35:42+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/114.0

Steps to reproduce:

I have some functions in an async chain that tied to a button. The functions just doing some simple job of set class name on some html elements and draw snap shot of an area of the window to a canvas.


Actual results:

After button is clicked and the code start executing at some point the browser stop respond. The point that stop respond happens is kind of random but the trigger of the stop respond is for sure.

It can be observed that stop respond happens at a certain line in the code if it happens within a function. By set a break point before the triggering line I can step it in to the stop respond state at same line every time. However if I make some changes to the code that did not affect its function but change its layout the point of it stop respond will change even fall out of the function I've set the break point on.

If I run the code of the line it will stop respond in the console of the debugger when the break point is hit and execution is paused just before the line that cause stop respond then step into the line the rest of the code can run to its end without problem.

mem dump:
https://drive.google.com/file/d/1RqxI1Vhowd2VYxmhXjyw_0o9VXjjyLpl/view?usp=sharing


Expected results:

The code runs set class name on some html elements then draw a canvas then unset the class name.