Firefox Support Forum

Hello,

I appreciate very much the recent security changes in Firefox 127, about mixed content. I think it really does improve both security and privacy, but I have HTTPS websites in a local network (private IP addresses) that load some images from a local IP camera over HTTP. I do not have control over these IP camera images, so as a temporary workaround I am allowing the whole website to be delivered over plain HTTP.

It's not a huge security issue, because it's on a local network which I access over the Internet via a VPN, but I would prefer to keep the website on HTTPS and allow mixed content for this specific IP address, so to keep the protection fully enabled when I browse the Internet.

Is there a way to enter a specific IP address in an exception list, so to selectively allow mixed content? Or, in alternative, is it possible to specify that all web requests from private IP addresses (RFC 1918) should allow mixed content?

Many thanks,

Piero

OK, I have Firefox (Windows 10 AMD64, desktop) configured to delete history when I close it.

So, I see that regular webiste cookies are deleted.

But are the HSTS website "super cookies" deleted?

https://ipleak.com/articles/what-is-hsts-super-cookies What are HSTS Super cookies and why are they dangerous?

thanx.

I'm very frustrated being a novice PC user! I Suspect a PC repair Co., that has had remote access to my PC in the past of some how accessing my Private network of 7 device's and making sure that some where on my network any of several app's they have used before to take remote access of my PC! I first noticed a problem after this co. initially set up my network. I would be on my PC and see the Any desk app soft ware. So I did uninstall the any desk app where ever I saw it on my network. This co. would call me and tell me to be sure and take advantage of their monthly tune up. Keep in mind I was scared into purchasing 3 year support package. I turned on my PC today,after using Google as my default Browser for a long time. I decided to try Firefox I was very disappointed to see that Firefox had been set up and the third bookmark was something called Take Remote. This Co. Is still in Business and my account is active. In my opinion I believe that all HACKER'S should have their hand's CUT OFF. Again I am a novice user, But for some one who use's their knowledge and their Company to prey on people like me, There Should be consequence's!!! I Would Greatly Appreciate any help or Advice you could help me with!

                                                                                Thank, You                                                                                              
                                                                          Michael Ruschman

Similar to this problem: https://support.mozilla.org/en-US/questions/1360287 .

I am using Debian 12, i3wm, and Firefox 127.0.1

After adding a new credit card to Firefox, I can go to any website that needs credit card info and it will auto fill successfully. When I reboot my computer and then try to auto fill credit card info, Firefox prompts me for the password to the "Default" keyring, but it does not autofill (something in the input box flashes quickly then it goes blank again). Firefox will not autofill again until I add a new credit card.

I had no success with Firefox in Troubleshooting mode either.

Good day,

I was experiencing a time related issue when my system clock was unexpectedly lagging behind. I was trying to connect to my https proxy while noticing. I had disabled ocsp querying and hard-fail to avoid any issues. So far, nothing was out of the ordinary. What really surprised me however, was that i was getting the OCSP_FUTURE_RESPONSE error all of a sudden. It should have never attempted querying the ocsp server in the first place. why then am i getting this error message?

When I launched Mozilla, it asked for the system admin password to perform an update. I had never encountered anything like this before, but unfortunately, I entered my credentials instinctively. When I realized that the browser had never asked for credentials for an update before, I checked the update history. According to the history, the last update was the day before. Additionally, I checked the modification dates of the files updater.exe, maintenanceservice.exe, and maintenanceservice_installer.exe, and they match the date when Firefox requested administrator privileges. I would like to know what could have caused this situation and whether it could have compromised the security of my Windows system.

Hi, I would like to know which version of Mozilla used this setting of network.trr.excluded-domains: 'sbl-xbl[.]spamhaus[.]org, localhost.that.never.exists'. The default is 'undefined' as I checked in 127.0.1 and the older 124. I also contacted support of extensions that I used, no evidence of both excluded domains. Can anyone help me? Thanks a lot \!o!/

Hi. About 2-3 weeks ago all of my websites that I use to started making me log in.

I seemed to have lost all of my saved passwords so I typed them all back in.

Now, most of them make me press the log on button and then my userid and password are primed in there so all I have to do is press enter.

I find this kind of frustrating. I don't recall changing any settings. Any ideas to change this?

Thank you.

Hello,

Ref: https://support.mozilla.org/en-US/kb/firefox-password-authentification-prompt

I am trying to get FF Windows to use my fingerprint scanner to authenticate the password manager functions. When I select the Subject option in Settings, then select More Options, I only see options for PIN or "Use Different Account". If I use a PIN to enable this option, then disable the option, I get a choice to select to Fingerprint or PIN. Is this a bug, or by design? I would like to always use fingerprint to access the password manager vs. PIN.

Thanks,

Terry

Already have configured correctly via https://support.mozilla.org/en-US/kb/control-whether-firefox-automatically-fills-forms

if i land in a form that wants an email FF does not fill in

I don't want to use passkeys, and it seems that every site is checking browser support and wasting my time with passkey prompts before allowing me to log in with a password. How do I disable passkey support in Firefox?

I really need to access these sites to install and use my Digital Password in Spain. This is Urgent and I am being prevented. I do not get the accept the risk and proceed option?

Recently Firefox started blocking articles from websites I normally use. First it added something called ublock origin which I did not ask for. I found a way to get rid of that, now something else pops up saying I have to install it. I DO NOT WANT ANY OF THIS. HOW CAN I STOP IT?

Below is the content-security-policy Firefox loads for chatGPT:

default-src 'self'; script-src 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'wasm-unsafe-eval' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; script-src-elem 'self' 'nonce-eec8ce04-1f27-4481-8ed6-b8f877eef280' 'sha256-RvbVrdDS11FSnQaULCOgXPA5u0nMP2Im1d2pGiRBGC4=' 'sha256-eMuh8xiwcX72rRYNAGENurQBAcH7kLlAUQcoOri3BIo=' auth0.openai.com challenges.cloudflare.com chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://apis.google.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://docs.google.com https://jidori.g1.internal.services.openai.org https://js.live.net/v7.2/OneDrive.js https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www-onepick-opensocial.googleusercontent.com wss://*.chatgpt.com wss://*.chatgpt.com/; img-src * 'self' blob: data: https: https://docs.google.com https://drive-thirdparty.googleusercontent.com https://ssl.gstatic.com; style-src 'self' 'unsafe-inline' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ wss://*.chatgpt.com wss://*.chatgpt.com/; font-src 'self' data: https://*.oaistatic.com https://fonts.gstatic.com; connect-src 'self' *.oaiusercontent.com api-iam.intercom.io api-js.mixpanel.com browser-intake-datadoghq.com chatgpt.com/ces fileserviceuploadsperm.blob.core.windows.net http://0.0.0.0:* http://localhost:* https://*.chatgpt.com https://*.chatgpt.com/ https://*.oaistatic.com https://api.onedrive.com https://api.openai.com https://chat.openai.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/graphql https://chatgpt.com/public-api https://chatgpt.com/voice https://content.googleapis.com https://docs.google.com https://events.statsigapi.net https://featuregates.org https://graph.microsoft.com https://jidori.g1.internal.services.openai.org https://oaistatic.com https://snc.apps.openai.com https://snc.chatgpt.com/backend/se https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ https://www.googleapis.com o33249.ingest.sentry.io statsigapi.net wss://*.chatgpt.com wss://*.chatgpt.com/ wss://*.intercom.io wss://*.webpubsub.azure.com; frame-src challenges.cloudflare.com https://*.sharepoint.com https://content.googleapis.com https://docs.google.com https://onedrive.live.com https://tcr9i.chat.openai.com https://tcr9i.chatgpt.com/ js.stripe.com; worker-src 'self' blob:; media-src blob: 'self' *.oaiusercontent.com fileserviceuploadsperm.blob.core.windows.net https://cdn.openai.com https://persistent.oaistatic.com; frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj; report-to chatgpt-csp-new; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub1f79f8ac903a5872ae5f53026d20a77c&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=version%3Achatgpt-csp-new

Notice that it includes " frame-ancestors chrome-extension://iaiigpefkbhgjcmcmffmfkpmhemdhdnj"

Would this extension be installed in the computer, kind of like the extensions that are loaded from Chrome (i.e., C:\Users\myUser\AppData\Local\Google\Chrome\User Data\extensions_crx_cache)?

Thanx

Any time I try to connect to the internet, Firefox claims either I am offline or the connection is not secure. I know I have a connection as I can access the support site and every other website on an entirely different browser. I have tried refreshing the page, double-checking Firefox is allowed through the firewall, cleared cache, cleared all cookies and site data, nothing I've done is working. Firefox just randomly stopped connecting a few days ago and I had the same issue with Google Chrome last month, which is when I made the switch to Firefox.

If anyone knows anything that could maybe help, that would be great. Thank you so much!