av9ash/GitBugs huggingface dataset:
Bug: Javascript dialog remains active in window after redirect
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2021-06-28 20:08:27+00:00
Resolved: 2024-05-30 17:34:09+00:00

Javascript dialog that is shown while a basic authentication dialog is displayed remains active in the window even after redirects.

When opening a new URL through window.open(), the opener is allowed to modify the about:blank document until the target URL starts loading. For pages that require basic authentication, Firefox will display the authentication dialog while remaining at about:blank.

This behavior allows the opener to append a script to that page that will show a Javascript dialog when the basic-authentication dialog is displayed. After the authentication dialog is closed, the script can redirect the page to any other domain and the Javascript dialog will remain active in that window.

Finally, the malicious code is loaded from a data URI in an Iframe, so the Javascript dialog will show "This page says" in its title instead of the URL of the attacker's page.

Passing the credentials directly to the URL (as in https://test@google.com) shows a different dialog that also works for the attack. Perhaps there are other types of dialogs that are vulnerable to this.

Video: https://youtu.be/Sk6tAGEMH4I

POC is attached.

This is similar to Bug 1313916.

Source code:

<meta charset="UTF-8">
<a href="https://jigsaw.w3.org/HTTP/Basic/" onclick="e(href); return false;">Click here</a>
<script>
function e(url){
    var x = open(url,'','width=800,height=400'); 
    var s = document.createElement('script');
    s.src = 'data:text/plain,function checkFocus(){fetch("data:,").then(()=>{document.hasFocus()?checkFocus():(alert("Arbitrary message 🙂"),location.replace("https://jigsaw.w3.org"))})}document.title="Google",checkFocus();';
    setTimeout(() => {x.document.body.appendChild(s);},100);
}
</script>
Bug: banking page garbled in new Firefox (89.0.2 (64-bit) UBUNTU 18.04.5
Status: RESOLVED
Priority: --
Resolution: WORKSFORME
Created: 2021-06-29 00:42:54+00:00
Resolved: 2021-08-10 11:50:29+00:00

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0

Steps to reproduce:

1) log in to Union Bank On Line Banking - https://www.unionbank.com/
2) Select Bill Pay - https://bankingsso.unionbank.com/billpay/getPayeeList.view



Actual results:

The first few items in the list display  correctly, but when there is a blue flag in one item says "Enroll in Ebills",  the display becomes offset to the right, breaking the item lines, creating a jumble.


Expected results:

Each group should display horizontally in a coherent manner, so I can use in confidently to pay my bills, as I have for years with previous Firefox versions.

This might also be a security problem ?

This works correctly in Chromium, no problem.  Payees are in clear groups, easy to use, as Firefox was before the latest update.
Bug: When title bar is full of pinned tabs, arrows do not appear to move between them. The title bar buttons disappear, together with the new tab button.
Status: NEW
Priority: --
Created: 2021-06-29 00:50:41+00:00
Resolved: 2022-08-08 20:36:53+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0

Steps to reproduce:

I've been running Nightly (have been there to see the development of Proton get pushed every night) for a while now and I assume this bug has gone unreported.

I pin a lot of tabs that go all the way across the Firefox title bar. At some point, I seem to reach a limit, and that limit seems to cause a bug that happens quite frequently.


Actual results:

Please refer to the first part of the screenshot.

At the limit, the title bar's close, maximize, minimize, arrow, and new tab buttons can sometimes skew off, not allowing me to use them, making it a hassle to try and (for example) close or maximize/minimize the window.


Expected results:

The second part of the screenshot shows what should happen when there are lots of new tabs: they should be able to be moved through with the arrows provided, and new tabs should be able to be created without any hassle. I should also be able to use that overflow menu arrow to go through tabs that are not pinned.
Bug: Firefox doesn't sync bookmarks whose name begins with a full stop (.)
Status: RESOLVED
Priority: --
Resolution: WORKSFORME
Created: 2021-06-29 10:28:42+00:00
Resolved: 2021-07-15 05:13:52+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0

Steps to reproduce:

1. Create bookmarks whose name begins with a full stop
2. Launch firefox on a new machine
3. Sign in
4. No bookmarks visible whose name begins with full stop


Actual results:

No bookmarks visible whose name begins with full stop


Expected results:

Bookmarks are synced regardless of name
Bug: not loading after being on for a while
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2021-06-29 10:56:54+00:00
Resolved: 2021-07-01 15:56:13+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:89.0) Gecko/20100101 Firefox/89.0

Steps to reproduce:

firefox can be working ok and then all of a sudden any new tabs or windows won't load any pages. Current open tabs will allow following links on the current webpage but won't load pages if typed into the address bar


Actual results:

blank page appears after very quick attempt to load. No error messages just a blank page. It will work after a restart of firefox, no other browsers showing this issue


Expected results:

page should load or at least some kind of error message
Bug: Bookmark entries switch their order randomly
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-06-29 11:40:33+00:00
Resolved: 2021-08-03 16:38:54+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0

Steps to reproduce:

Add many (20-40) bookmarks to a folder. Adding new ones with drag&drop.


Actual results:

Adding new ones with drag&drop may place them at random position. Moving bookmarks makes them often jump around to random positions. It's a total mess since several versions. Fix this idiocy.


Expected results:

Working Firefox. This is something unseen in several months. Maybe try less libtard politics and more good code, for a change?
Bug: Windows 11 Snap Layouts menu doesn't appear while hovering
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2021-06-29 12:24:17+00:00
Resolved: 2022-11-22 19:29:48+00:00

When hovering the maximize/minimize window button on Windows 11, a hover menu to snap the window is supposed to appear. 

On Firefox 91, the Snap Layouts hover menu doesn't appear.
Bug: [XFA] A specific PDF is poorly rendered
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2021-06-29 12:45:41+00:00
Resolved: 2021-07-09 11:24:47+00:00

**Note**
* When the user loads a specific PDF, he will notice that the file will render incorrectly. This is somewhat inconsistent since page 2 is displayed correctly, but only page 2.

**Affected versions**
* Nightly v91.0a1

**Affected platforms**
* all

**Steps to reproduce**
1. Launch browser.
2. Flip the pdfjs.enableXfa to true.
3. Load the attached PDF file.

**Expected result**
* The file is loaded and displayed correctly.

**Actual result**
* The file is NOT loaded and displayed correctly.

**Regression range**
* This is not a regression.
Bug: Personal information footer is not displayed correctly
Status: NEW
Priority: P2
Created: 2021-06-29 12:49:32+00:00
Resolved: 2022-02-24 18:13:22+00:00

#### Tested with:

Nightly 91.0a1 (2021-06-29)
#### Tested on:

Windows 10

#### Steps:

  1. Launch the browser.
  2. Flip the pdfjs.enableXfa to true.
  3. Load the attached PDF file.
  4. Go to the bottom of the pdf and see the "Send Complaint Form to" footer.

#### Actual result:

The "Send Complaint Form to" section is not displayed correctly (see comment 1).
#### Expected result:
The "Send Complaint Form to" section should be displayed correctly as in acrobat reader.
Bug: Download progress icon is misaligned on higher resolution screens
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-06-29 12:57:57+00:00
Resolved: 2021-07-09 13:12:03+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0

Steps to reproduce:

I downloaded a file using a 1440p screen


Actual results:

The download icon was misaligned towards the top left


Expected results:

The download icon should've been in the center
Bug: Issues with accentuated characters when filling and saving PDF files
Status: RESOLVED
Priority: P3
Resolution: DUPLICATE
Created: 2021-06-29 14:04:21+00:00
Resolved: 2022-12-01 05:01:29+00:00

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0

Steps to reproduce:

0) Open PDF liked on page http://patrimoine.brussels/liens/formulaires/demande-de-prime-petit-patrimoine/view
1) Fill the fields in the PDF and use some accentuated characters (é,è,...)
2) Save the PDF

(I'm using fr_BE.UTF-8 locales)


Actual results:

When opening the PDF in evince, the accentuated characters are rendered with mostly Ø


Expected results:

The accentuated characters are properly rendered
Bug: Typing a division in the address bar may not show the expected result search suggestion
Status: NEW
Priority: P3
Created: 2021-06-29 15:22:24+00:00
Resolved: 2021-07-07 01:29:23+00:00

[Affected versions]:
- Fx 89.0
- Fx 90.0bx
- Fx 91.0a1

[Affected platforms]:
- Windows 10 x64
- Ubuntu 20.04 LTS
- macOS 10.13

[Steps to reproduce]:
1. Launch Firefox.
2. Focus the address bar and write a simple multiplication calculus without spacing. (i.e: 6*2)
3. Open a new tab, focus the address bar and write a simple division calculus without spacing. (i.e: 6/2)

[Expected result]:
- The address bar calculator displays the calculus result.

[Actual result]:
- The address bar's division calculus is faulty.

[Regression range]:
- This is a implementation issue, it does not have a regression.

[Additional notes]:
- Sometimes the result of the division is displayed when spacing is used(i.e: 6 / 2);
- Additions, subtractions and multiplication are working accordingly regardless of the spacing;
- The issue may be caused by the "/" from the division being used in URL's.
Bug: security.certerrors.mitm.auto_enable_enterprise_roots does not work in Firefox Portable 89.  security.enterprise_roots.enabled has to be set manually to true
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2021-06-29 15:29:40+00:00
Resolved: 2021-06-29 15:41:23+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Steps to reproduce:

- install Firefox portable version 89
- check if security.certerrors.mitm.auto_enable_enterprise_roots is set to true
- check security.enterprise_roots.enabled is set to false
- go to website that gives TLS error




Actual results:

The mechanism did not work and did not set security.enterprise_roots.enabled to true automatically.

The potential security risk error appeared.
When setting security.enterprise_roots.enabled to true manually I coudl visit the site without any issues.


Expected results:

When the TLS error occured Firefox should of set the security.enterprise_roots.enabled setting automatically to true and try to reconnect 
as in the non portable versions.
I tried with non portable versions 88 and 89 and they gave the desired result.
Not like the portable version.
Bug: security.certerrors.mitm.auto_enable_enterprise_roots does not work in Firefox Portable 89.  security.enterprise_roots.enabled has to be set manually to true
Status: RESOLVED
Priority: --
Resolution: INVALID
Created: 2021-06-29 15:31:25+00:00
Resolved: 2021-06-29 15:41:07+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36

Steps to reproduce:

- install Firefox portable version 89
- check if security.certerrors.mitm.auto_enable_enterprise_roots is set to true
- check security.enterprise_roots.enabled is set to false
- go to website that gives TLS error




Actual results:

The mechanism did not work and did not set security.enterprise_roots.enabled to true automatically.

The potential security risk error appeared.
When setting security.enterprise_roots.enabled to true manually I could visit the site without any issues.


Expected results:

When the TLS error occured Firefox should have set the security.enterprise_roots.enabled setting automatically to true and try to reconnect 
as in the non portable versions.
I tried with non portable versions 88 and 89 and they gave the desired result.
Not like the portable version.
Bug: Unable to search filenames or similar with new UI
Status: RESOLVED
Priority: --
Resolution: DUPLICATE
Created: 2021-06-29 16:34:43+00:00
Resolved: 2021-07-05 13:45:39+00:00

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0

Steps to reproduce:

Type an item to search in the search line on the start page (firefox standard)



Actual results:

focus jumps to the address line and entry happens there. 
entry will be taken as an URL if it fits the scheme.

!!! searching for an malicious URL will actually open this URL !!! 


Expected results:

seaching for an url or filename should forward this entry exactly to the search engine. (duckduckgo i.e.)
Bug: [AcroForm] Cannot "tab through" some fields as expected
Status: RESOLVED
Priority: P3
Resolution: FIXED
Created: 2021-06-29 16:56:47+00:00
Resolved: 2023-06-02 15:21:40+00:00

**Note**
* When the user loads a specific PDF and attempts to tab through all fields, he will notice that some fields can't be reached.

**Affected versions**
* Nightly v91.0a1

**Affected platforms**
* all

**Steps to reproduce**
1. Launch browser.
2. Flip the pdfjs.enableXfa to true.
3. Load the attached PDF file.
4. Tab through the fields until you reach the 3 fields from section 2 (Social Security number previously assigned to the person listed in item 1).

**Expected result**
* Fields are correctly reachable.

**Actual result**
* Fields are not reachable.

**Regression range**
* This is not a regression.

**Additional information:**
* These fields are, in fact, reachable in incorrect order AFTER the last field from the document, so their order is incorrect.
* This issue does not occur in the case of the social security number fields from sections 9 and 10.
Bug: [XFA] Severe alignment issues
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2021-06-29 17:17:25+00:00
Resolved: 2021-08-05 19:34:49+00:00

**Note**
* When the user loads a specific PDF, he will notice the sevede allignment issues

**Affected versions**
* Nightly v91.0a1

**Affected platforms**
* all

**Steps to reproduce**
1. Launch browser.
2. Flip the pdfjs.enableXfa to true.
3. Load the attached PDF file.

**Expected result**
* The document is correctly displayed (as in Adobe Reader).

**Actual result**
* Severe alignment issues and overlapping are being observed.

**Regression range**
* This is not a regression.

**Additional information:**
* -
Bug: Date field not working as expected
Status: RESOLVED
Priority: --
Resolution: INCOMPLETE
Created: 2021-06-29 17:56:39+00:00
Resolved: 2021-08-07 06:43:13+00:00

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:78.0) Gecko/20100101 Firefox/78.0

Steps to reproduce:

Create a input date field and add min and max attribute. If you click on the field it will work as expected. If we go ahead and type the date in the field, it will be assigned to the value. 


Actual results:

If we go ahead and type the date in the field, it will be assigned to the value even though if we added min and max attribute


Expected results:

If manually enters date in date field, it should be disabled on editing as chrome does.
Bug: Menu displayed partially (Windows 10 125% scale)
Status: NEW
Priority: P3
Created: 2021-06-30 05:28:06+00:00
Resolved: 2021-07-12 15:12:29+00:00

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0

Steps to reproduce:

1) Connect a secondary monitor (24inch)
2) Primary monitor windows scale 125%, secondary 100%.




Actual results:

Drop down menu is not displayed fully in 125% scale monitor. Same applies to extensions.


Expected results:

Drop down menu displays fully
Bug: Missing data/text from the boxes
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2021-06-30 06:31:01+00:00
Resolved: 2021-07-30 08:01:21+00:00

#### Tested with:

Nightly 91.0a1 (2021-06-29)
#### Tested on:

Windows 10

#### Steps:

  1. Launch the browser.
  2. Flip the pdfjs.enableXfa to true.
  3. Load the attached PDF file and observe the content of the boxes.

#### Actual result:

The data/text of the boxes are missing (see comment 1).
#### Expected result:
All the data/text should be displayed accordingly.
Bug: [XFA] Many text input fields are inaccessible
Status: NEW
Priority: P3
Created: 2021-06-30 08:32:31+00:00
Resolved: 2022-02-24 18:26:02+00:00

**Note**
* When the user loads a specific PDF file in Adobe Reader and Firefox, he scrolls after the "Votre demande:" section, he will notice that the input fields are inaccessible.

**Affected versions**
* Nightly v91.0a1

**Affected platforms**
* all

**Preconditions**
* Flip the "pdfjs.enableXfa" pref to true.

**Steps to reproduce**
1. Launch browser.
2. Load the attached PDF file.
3. Scroll after "Votre demande:" section and access some fields.

**Expected result**
* The cursor appears and the user is able to input text.

**Actual result**
* The cursor does not appear and the user is NOT able to input text.

**Regression range**
* Not a regression, but an implementation fault.
Bug: [XFA] Many text input fields are improperly highlighted
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2021-06-30 08:57:52+00:00
Resolved: 2021-07-08 23:18:07+00:00

**Note**
* When the user loads a specific PDF file in Adobe Reader and Firefox, he will notice that most of the input fields are incorrectly coloured with black/blue backgrounds.

**Affected versions**
* Nightly v91.0a1

**Affected platforms**
* all

**Preconditions**
* Flip the "pdfjs.enableXfa" pref to true.

**Steps to reproduce**
1. Launch browser.
2. Load the attached PDF file.

**Expected result**
* The fields are correctly rendered.

**Actual result**
* Most of the text input fields are improperly displayed.

**Regression range**
* Not a regression, but an implementation fault.

**Additional information:**
* The fields appear to be accessible and correctly functioning, but their UI is broken.
Bug: [XFA] List box is recognized as a drop-down list
Status: NEW
Priority: P2
Created: 2021-06-30 09:16:10+00:00
Resolved: 2022-02-24 18:46:31+00:00

**Note**
* When the user loads a specific PDF file in Adobe Reader and Firefox and compares the so-called "List box" element, he will notice that the list box is incorrectly recognized as a drop-down list.

**Affected versions**
* Nightly v91.0a1

**Affected platforms**
* all

**Preconditions**
* Flip the "pdfjs.enableXfa" pref to true.

**Steps to reproduce**
1. Launch browser.
2. Load the attached PDF file.
3. Observe the "List box" element.

**Expected result**
* The List box is recognized as a list box (as in Adobe Reader).

**Actual result**
* The List box appears as a drop-down list.

**Regression range**
* Not a regression, but an implementation fault.
Bug: Add another section buttons does not work
Status: NEW
Priority: --
Created: 2021-06-30 09:45:27+00:00
Resolved: 2022-02-24 18:56:40+00:00

#### Tested with:

Nightly 91.0a1 (2021-06-29)
#### Tested on:

Windows 10

#### Steps:

  1. Launch the browser.
  2. Flip the pdfjs.enableXfa to true.
  3. Load the attached PDF file and click on the "Add another appellee/attorney" button.

#### Actual result:

Nothing happens (see comment 1). Also the bottom of the buttons are cut off. The page number is not displayed as well (could be the same with bug 1717596)
#### Expected result:
A new appellee/attorney section should be added.
Bug: [XFA] Many pages are missing
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2021-06-30 09:59:50+00:00
Resolved: 2021-07-09 13:12:10+00:00

**Note**
* When the user loads a specific PDF file in Adobe Reader and then opens it in Firefox, he will notice that the second page is missing.

**Affected versions**
* Nightly v91.0a1

**Affected platforms**
* all

**Steps to reproduce**
1. Launch browser.
2. Load the attached PDF file.

**Expected result**
* The PDF has 34 pages.

**Actual result**
* The PDF only has 9 pages.

**Regression range**
* Not a regression.
Bug: Overlapped text and buttons
Status: VERIFIED
Priority: P1
Resolution: FIXED
Created: 2021-06-30 10:02:01+00:00
Resolved: 2021-08-25 16:53:54+00:00

#### Tested with:

Nightly 91.0a1 (2021-06-29)
#### Tested on:

Windows 10

#### Steps:

  1. Launch the browser.
  2. Flip the pdfjs.enableXfa to true.
  3. Load the attached PDF file and go to the page 7 (in Nightly), page 6 (in Acrobat Reader).
#### Actual result:

The text and the radio buttons are overlapped (see comment 1).
#### Expected result:
The radio buttons and the text should be displayed correctly.
Bug: [macOS] White artifacts with high contrast on dark theme
Status: RESOLVED
Priority: --
Resolution: FIXED
Created: 2021-06-30 10:18:42+00:00
Resolved: 2022-03-27 23:48:08+00:00

**Affected versions**
* Nightly 91.0a1 (Build ID: 20210629214925)

**Affected platforms**
* macOS 11 
   macOS 10.15

**Steps to reproduce**
1.  Start Firefox.
2.  Enable dark theme on OS level.
3.  Enable dark theme for Firefox.
4.  Enable High Contrast.
5. Visit  www.youtube.com and select a video.

**Expected result**
* There are no visual artifacts on dark mode with High Contrast. 

**Actual result**
* There are several white visual artifacts. 

**Regression range**
* First bad:  2021-06-03
* Last good:  2021-06-02
* Pushlog: https://hg.mozilla.org/integration/autoland/log?rev=52ed1b7f1fb09ac54ca8fda70201a5258fd00647
* Potentially regressed by: https://bugzilla.mozilla.org/show_bug.cgi?id=1713015

**Additional notes**
* The white background while in dark theme is a separate bug 1709508
Bug: The Remote Settings Sponsored Top Sites are displayed after dismissing the Contile Sponsored Top Sites
Status: VERIFIED
Priority: --
Resolution: FIXED
Created: 2021-06-30 12:53:28+00:00
Resolved: 2021-07-07 16:54:48+00:00

[Notes]:
- This behavior was introduced by the patch from Bug 1717847. Our concern is that the users that have both RS and Contile enabled, at some point, might dismiss the Sponsored Top Sites and after a browser restart, they will appear again. The users might feel that their decision is not respected.

**[Affected versions]:**
- Nightly 91.0a1;

**[Affected Platforms]:**
- Windows 10 x64;
- macOS 10.15.7;
- Ubuntu 20. x.0

**[Prerequisites]:**
- Have the latest Firefox Nightly installed.

- Have the following pref set to enable Remote Settings Sponsored Top Sites: 
- browser.topsites.useRemoteSetting = true
- browser.partnerlink.useAttributionURL = true
- browser.topsites.experiment.ebay-2020-1 = true

- Have the following pref set to enable Contile:
- `browser.topsites.contile.enabled` = `true`
- Be connected to a VPN US region.

**[Steps to reproduce]:**
1. Open the Firefox browser with the profile from prerequisites.
2. Dismiss both Amazon and eBay Sponsored Top Site.
3. Restart the browser.
4. Observe the Top Sites.

**[Expected result]:**
- No Sponsored Top Site is displayed.

**[Actual result]:**
- The previously dismissed Sponsored Top Sites are displayed.

**[Additional Notes]:**
- Attached a screen recording of the issue.