This page is still WIP.
See torpatch.es for detailed information about all commits contained in Tor Browser.
Commits in Tor Browser: 339
Changes in Tor Browser: 233
Recently closed uplift bugs (Bugzilla query):
| Bug # | Closed At | Fixed In | Assignee | Product | Component | Summary |
|---|---|---|---|---|---|---|
| Bug 1993166 | 2025-10-14 | Fx146 | pierov | Firefox | Search | Improve the origin attributes used to fetch engine icons |
| Bug 1987183 | 2025-10-08 | Fx145 | pierov | Toolkit | Add-ons Manager | Consider checking the "Enable in PBM" checkbox when always-on PBM is active |
| Bug 1987600 | 2025-10-07 | Fx145 | pierov | Firefox | Search | The OpenSearch loader doesn't set origin attributes |
| Bug 1990520 | 2025-09-25 | Fx145 | pierov | Core | Networking: Proxy | Use a specialized error when avoiding speculative connections |
| Bug 1989255 | 2025-09-19 | Fx145 | henry-x | Firefox | Menus | Console error when opening the "View > Toolbars" menu |
| Bug 1700969 | 2025-08-05 | Fx143 | pierov | Core | DOM: Core & HTML | Remove CompositionEvent#locale |
| Bug 1976726 | 2025-07-14 | Fx142 | pierov | Firefox Build System | General | LTO options should check for clang-cl rather than WINNT |
| Bug 1972755 | 2025-06-27 | Fx142 | bea | Firefox Build System | General | ./mach configure only looks for bundletool and avd in mozbuild_state_path |
| Bug 1971306 | 2025-06-27 | Fx142 | bea | Firefox Build System | Bootstrap Configuration | Do not attempt to bootstrap macOS packaging tools if already available in environment |
| Bug 1900648 | 2025-05-21 | Fx140 | pierov | Core | XSLT | XSLT error messages can leak browser UI language |
| Bug 1965035 | 2025-05-15 | Fx140 | pierov | Firefox for Android | Browser Engine | DohSettingsStore.kt imports WebRTC but it does not use it |
| Bug 1963354 | 2025-04-29 | Fx140 | pierov | Core | Widget: Gtk | Fix the GTK version checked for decalring some constants in widget/gtk/nsWindow.cpp |
| Bug 1959147 | 2025-04-29 | Fx140 | pierov | Core | XSLT | Migrate XSLT errors l10n strings from .properties to Fluent |
| Bug 1959305 | 2025-04-11 | Fx139 | dan | Core | Networking: DNS | When Parental Controls Service is disabled, DNS Over HTTPS settings fail to work with uncaught exception |
| Bug 1825033 | 2025-04-09 | Fx139 | henry-x | Toolkit | Add-ons Manager | Badge descriptions should not use brand-product-name, but hardcode Mozilla |
| Bug 1958504 | 2025-04-07 | Fx139 | Gijs | Firefox | Security | Blank net error page on failed DNS resolution with active proxy |
| Bug 1958759 | 2025-04-07 | Fx139 | pierov | Core | Privacy: Anti-Tracking | RFPHelperParent.sys.mjs is still in the tree |
| Bug 1954493 | 2025-04-01 | Fx139 | pierov | Core | CSS Parsing and Computation | Device pixel ratio is different from the media query resolution when using RFP |
| Bug 1923260 | 2025-02-19 | Fx137 | pierov | Core | DOM: Core & HTML | about:neterror pages are not exempt from svg.disabled on Android |
| Bug 1556014 | 2025-02-17 | Fx137 | pierov | Core | Privacy: Anti-Tracking | Letterboxing is not applied immediately while the page is resized |
| Bug 1556016 | 2025-02-13 | Fx137 | pierov | Core | Window Management | Letterboxing can be bypassed in a pre-render state |
| Bug 1946501 | 2025-02-08 | Fx137 | pierov | Core | WebRTC: Audio/Video | ScreenCaptureKit.framework should be a weak_framework |
| Bug 1944268 | 2025-01-29 | Fx136 | henry-x | Toolkit | Add-ons Manager | Duplicate aria-label and title |
| Bug 1840385 | 2025-01-25 | Fx136 | pierov | Core | Privacy: Anti-Tracking | kasada.io anti-bot protected sites (eg nike.com, twitch.tv) fail login with RFP due to UA missing <oscpu> token or reporting different OS |
| Bug 1555815 | 2025-01-14 | Fx136 | pierov | Core | Window Management | Do not apply letterboxing to moz-extension:// pages |
| Bug 1556002 | 2024-10-23 | Fx133 | pierov | Core | Window Management | Change the Initial Window Size Resolution to use the same Stepped Resolution as Letterboxing |
| Bug 1390465 | 2024-10-18 | Fx133 | fkilic | Core | Audio/Video: Playback | disable or limit WebVTT with privacy.resistFingerprinting |
| Bug 1923264 | 2024-10-09 | Fx133 | pierov | Toolkit | Application Update | The update selection could check for unsupported updates |
| Bug 1918009 | 2024-09-27 | Fx132 | pierov | Core | Privacy: Anti-Tracking | privacy.resistfingerprinting using unique user agent |
| Bug 1917595 | 2024-09-20 | Fx132 | henry-x | Firefox | Toolbars and Customization | Tabs separator not drawn in private window |
| Bug 1919363 | 2024-09-20 | Fx132 | henry-x | Firefox | Private Browsing | Hide app menu new private window in permanent private browsing mode |
| Bug 1919297 | 2024-09-17 | Fx132 | henry-x | Firefox Graveyard | Shopping | Clean up unused isProductURL import in browser.js |
| Bug 1436462 | 2024-09-11 | Fx132 | henry-x | Firefox | Bookmarks & History | Reword Open in a New Window to Open in a New Private Window |
| Bug 1607032 | 2024-09-10 | Fx132 | fkilic | Core | CSS Parsing and Computation | RFP: make spoofed orientation reflect spoofed screen dimensions |
| Bug 1436226 | 2024-09-10 | Fx132 | fkilic | Core | Audio/Video: Playback | Hardcode VP8/VP9 algorithm choice when resisting fingerprinting |
| Bug 1904802 | 2024-06-27 | Fx129 | henry-x | Firefox | Theme | .title icon in info-pages may be cropped |
| Bug 1903254 | 2024-06-19 | Fx129 | pierov | Firefox Build System | General | relrhack fails to build because std::array is not defined |
| Bug 1880108 | 2024-06-05 | Fx128 | pierov | Toolkit | UI Widgets | Placeholders on the datetime widget ignore spoof English |
| Bug 1835987 | 2024-05-31 | Fx128 | pierov | Core | Privacy: Anti-Tracking | kasada.io anti-bot protected sites (eg nike.com, twitch.tv) fail login with UTC timezone spoofing on Linux |
| Bug 1892046 | 2024-05-29 | Fx128 | pierov | Toolkit | Reader Mode | The reader mode does not set a first party domain |
| Bug 1851618 | 2024-05-29 | Fx128 | henry-x | Firefox | Settings UI | Cannot remove packaged locales from the locale alternatives list (multi-locale build) |
| Bug 1787790 | 2024-05-27 | Fx128 | pierov | Core | Layout: Text and Fonts | getComputedStyle reports a wrong family for system fonts under certain conditions |
| Bug 1781855 | 2024-05-14 | Fx128 | pierov | Core | Privacy: Anti-Tracking | Intermittent browser/components/resistfingerprinting/test/browser/browser_timezone.js | single tracking bug |
| Bug 1892052 | 2024-05-13 | Fx128 | pierov | DevTools | Netmonitor | The new request data is persisted when done from PBM |
| Bug 1554751 | 2024-05-03 | Fx127 | pierov | Core | DOM: Security | Consider to change the spoof value of window.devicePixelRatio |
| Bug 1886687 | 2024-04-11 | Fx126 | pierov | Core | DOM: Core & HTML | Timezone leak through document.lastModified when using RFP |
| Bug 1880988 | 2024-03-11 | Fx125 | pierov | Core | DOM: Core & HTML | The default summary for details doesn't honor spoof English |
| Bug 1875313 | 2024-02-01 | Fx124 | pierov | Core | Privacy: Anti-Tracking | Spoof English is ignored in number validation |
| Bug 1875306 | 2024-01-23 | Fx124 | pierov | Core | DOM: Core & HTML | The underflow and overflow errors do not localize numbers |
| Bug 1860020 | 2023-12-13 | Fx122 | pierov | Core | Preferences: Backend | Debug builds with telemetry off are unusable |
| Bug 1849186 | 2023-11-13 | Fx121 | pierov | Firefox | Private Browsing | Browsing history leaked to syslogs via GNOME |
| Bug 1854117 | 2023-09-27 | Fx120 | pierov | Firefox | General | The headers with the DLL blocklists are not generated deterministically |
| Bug 1849129 | 2023-09-12 | Fx119 | pierov | Firefox | Search | An extension adding a duplicate search engine will prevent the SearchService from initializing |
| Bug 1358149 | 2023-08-11 | Fx118 | karlt | Core | Web Audio | Address fingerprinting issues with AudioContext |
| Bug 1832523 | 2023-06-15 | Fx116 | pierov | Toolkit | Application Update | Optionally use NSS for MAR signature verification on Windows/macOS |
| Bug 1770174 | 2023-05-16 | Fx115 | pierov | Toolkit | Startup and Profile System | Two profiles created on first startup, <something>.default-release and <something>.default |
| Bug 1829140 | 2023-05-11 | Fx115 | pierov | Toolkit | Telemetry | Some telemetry collection could be conditioned on MOZ_TELEMETRY_REPORTING |
| Bug 1817756 | 2023-02-21 | Fx112 | pierov | Core | Networking | Consider adding a seed to the network ID |
| Bug 1814416 | 2023-02-15 | Fx112 | pierov | Firefox Build System | General | Use the app displayname in about:buildconfig |
| Bug 1769028 | 2022-11-07 | Fx108 | pierov | Toolkit | Startup and Profile System | nsProfileLock::LockWithSymlink should not perform DNS requests when the proxy bypass protection is enabled |
| Bug 1728378 | 2022-10-04 | Fx94 | henry-x | Thunderbird | Disability Access | Image elements with missing alt text |
| Bug 1707211 | 2022-10-04 | Fx94 | henry-x | Thunderbird | General | stop using content/ css - move the css to the shared theme file instead |
| Bug 1768907 | 2022-09-22 | Fx107 | pierov | Core | Widget | nsTransferable disk-leaks when private browsing mode is enabled by default |
| Bug 1769030 | 2022-08-17 | Fx105 | pierov | Firefox | Enterprise Policies | Add a configure flag to load policies only from the local policies.json file |
| Bug 1774413 | 2022-08-02 | Fx105 | pierov | Core | Layout: Text and Fonts | Bundled fonts are not picked up on macOS |
| Bug 1588155 | 2022-08-01 | Fx95 | henry-x | Thunderbird | Filters | Long message filter (e.g. 100 rule filters) hangs Thunderbird, after de-xbl |
| Bug 1754097 | 2022-07-30 | Fx102 | henry-x | Thunderbird | Toolbars and Tabs | Pressing `Tab` on main window cycles the close buttons of *all* open tabs |
| Bug 1777184 | 2022-07-22 | Fx104 | henry-x | Thunderbird | Toolbars and Tabs | Status bar yields too much information, e.g. spaces toolbar button (NVDA screen reader accessibility) |
| Bug 1775245 | 2022-07-21 | Fx104 | henry-x | Thunderbird | General | tree-listbox should have ARIA role of "tree" for addressbook and account manager |
| Bug 1778958 | 2022-07-13 | Fx104 | henry-x | Thunderbird | Theme | Folder properties dialog too small for translations/localizations like Finnish, Russian etc. |
| Bug 1777505 | 2022-07-06 | Fx104 | henry-x | Thunderbird | Address Book | Intermittent comm/mail/components/addrbook/test/browser/browser_display_card.js | Cards list should have focus (actual: cards) - false == true |
| Bug 1776657 | 2022-07-05 | Fx104 | henry-x | Thunderbird | Address Book | Inconsistent focus after activating the "Add <field>" buttons in the vcard contact form |
| Bug 1752013 | 2022-06-30 | Fx104 | henry-x | Thunderbird | Address Book | Lost double-click, `Enter` and properties keyboard shortcuts to edit selected contact in New Address Book |
| Bug 1776644 | 2022-06-28 | Fx104 | henry-x | Thunderbird | Address Book | screen-reader-only class in email table disrupting Orca table navigation |
| Bug 1751986 | 2022-06-26 | Fx103 | henry-x | Thunderbird | Address Book | Missing focus ring after Ctrl+click or Ctrl+Space* on selected contact in new Address Book |
| Bug 1717632 | 2022-06-23 | Fx103 | henry-x | Thunderbird | Address Book | Improve semantics and accessibility of the addressbook view/edit side panel |
| Bug 1751978 | 2022-06-21 | Fx103 | henry-x | Thunderbird | Address Book | No keyboard equivalent for Ctrl+click: Cannot select multiple non-adjacent contacts in new Address Book with Ctrl+Arrow up/down, [Ctrl+]Spacebar |
| Bug 1738942 | 2022-06-21 | Fx103 | henry-x | Thunderbird | Address Book | Accessibility regression: wrong item count in new Address Book contact list |
| Bug 1772000 | 2022-06-01 | Fx103 | henry-x | Thunderbird | Message Compose Window | CC field disclosure button shows keyboard short for To (Ctrl+Shift+T) |
| Bug 1769250 | 2022-05-20 | Fx102 | pierov | Firefox | Screenshots | Check whether the addon is really present before trying to enable/disabling it |
| Bug 1767823 | 2022-05-06 | Fx102 | henry-x | Thunderbird | Mail Window Front End | Remove the Meta+UpArrow and Meta+DownArrow keyboard controls in spaces toolbar |
| Bug 1727493 | 2022-04-28 | Fx101 | henry-x | Thunderbird | Message Compose Window | Get rid of recipient-centric HTML vs. Plain Text delivery options (Send Options dialog) |
| Bug 1720348 | 2022-04-04 | Fx100 | henry-x | Thunderbird | Message Compose Window | Dropping pill on CC or BCC buttons causes header area to have the wrong height (with reduced window height): Improve addressing area auto-height algorithm, fix splitter behaviour |
| Bug 1741361 | 2022-03-25 | Fx100 | henry-x | Thunderbird | Message Compose Window | Follow-up to bug 1729314 (Attachment bar is not accessible): Use the html splitter between the compose browser and attachment area |
| Bug 1760249 | 2022-03-23 | Fx100 | henry-x | Calendar | Calendar Frontend | In day/week view, events that end at midnight have no end gripbar |
| Bug 1755036 | 2022-03-22 | Fx99 | henry-x | Thunderbird | General | Improve the pane-splitters for the 3pane and to use elsewhere |
| Bug 1713130 | 2022-03-18 | Fx96 | henry-x | Calendar | Calendar Frontend | Restructure Day and Week views using HTML |
| Bug 1735048 | 2022-03-16 | Fx100 | henry-x | Thunderbird | Disability Access | Email notifications for screen readers no longer work since Thunderbird 94.0b1 |
| Bug 1754733 | 2022-02-12 | Fx99 | henry-x | Thunderbird | Message Compose Window | Focus jumps from body to empty to subject when closing contacts sidebar |
| Bug 1589861 | 2022-02-08 | Fx99 | henry-x | Thunderbird | Disability Access | Content of "Subject" field in headers pane not read by screen readers |
| Bug 1751029 | 2022-01-20 | Fx98 | henry-x | Thunderbird | Message Compose Window | Fix isContextMenu typo in openExtraAddressRowsMenu |
| Bug 1749949 | 2022-01-20 | Fx98 | henry-x | Calendar | Calendar Frontend | Wrong day heading lengths used when rotating the week view |
| Bug 1720174 | 2022-01-17 | Fx98 | henry-x | Thunderbird | Message Compose Window | fix browser_font_size.js, browser_remove_text_styling.js and browser_text_styling.js tests |
| Bug 1432983 | 2021-12-17 | Fx97 | tjr | Firefox Build System | General | Introduce a build flag to disable libmdns |
| Bug 1586061 | 2021-12-17 | Fx97 | spohl | Core | Widget: Cocoa | hidden window churn causes app menu to stop working |
| Bug 1698484 | 2021-12-16 | Fx97 | henry-x | Thunderbird | Message Compose Window | Comma pill creation takes full input instead of just the content before the typed comma |
| Bug 1729714 | 2021-12-14 | Fx97 | henry-x | Thunderbird | Message Compose Window | Notification box is not easily focused through the keyboard. |
| Bug 1745715 | 2021-12-14 | Fx97 | pierov | Core | Layout: Text and Fonts | Bundled fonts should have Base visibility even when they are also system-wide installed |
| Bug 1729499 | 2021-12-13 | Fx97 | henry-x | Calendar | Calendar Frontend | Day/Week view can (inconsistently) produce squashed hour lines. |
| Bug 1739364 | 2021-12-08 | Fx97 | henry-x | Calendar | Calendar Frontend | Make multiday view auto-scroll bidirectional |
| Bug 1683303 | 2021-12-03 | Fx89 | henry-x | Thunderbird | General | Remove Thunderbird usage of XUL equalsize="always" |
| Bug 1736386 | 2021-11-26 | Fx96 | henry-x | Calendar | Calendar Frontend | Calendar event titles have an ellipsis in Week view |
| Bug 1741191 | 2021-11-24 | Fx96 | henry-x | Calendar | Calendar Frontend | Multiday view context menu does not used clicked time |
| Bug 1740958 | 2021-11-21 | Fx96 | henry-x | Calendar | Calendar Frontend | Events lasting longer than a week can have incorrect number of "shadows" when dragging |
| Bug 1683326 | 2021-11-10 | Fx96 | henry-x | Calendar | Calendar Frontend | No auto-scroll when creating event via dragging in calendar tab |
| Bug 1683328 | 2021-11-10 | Fx96 | henry-x | Calendar | Calendar Frontend | Creating event by dragging in calendar view: text edit of description is hanging - happens in cases where auto-scroll to create new fails |
| Bug 1732360 | 2021-10-29 | Fx95 | sysrqb | Core | Graphics: Text | Missing header Includes when MOZ_BUNDLED_FONTS is set |
| Bug 1737569 | 2021-10-28 | Fx95 | henry-x | Calendar | Calendar Frontend | multiday selection not cleared when switching between weeks, and selection appears locked |
| Bug 1734577 | 2021-10-27 | Fx95 | henry-x | Thunderbird | General | New Mail Notification window has zero height |
| Bug 1737316 | 2021-10-27 | Fx95 | henry-x | Calendar | Calendar Frontend | Flashing alarms not shown in multiday views. |
| Bug 1457074 | 2021-10-26 | Fx94 | henry-x | Thunderbird | Message Compose Window | Attachments drag and drop between attachment panes of two compose windows will only copy one attachment |
| Bug 1678220 | 2021-10-21 | Fx95 | henry-x | Thunderbird | Folder and Message Lists | Attachments column in thread pane has become useless because of PGP keys, esp. Sent folder: How to tell apart attached keys from user-added file attachments? |
| Bug 1730334 | 2021-10-20 | Fx95 | henry-x | Thunderbird | Mail Window Front End | Attachment icons stretched on high-DPI monitor |
| Bug 1735581 | 2021-10-16 | Fx95 | henry-x | MailNews Core | Database | Remove the gloda isRealAttachment property |
| Bug 1734933 | 2021-10-14 | Fx95 | henry-x | Thunderbird | General | type-column-label is missing from zh-CN language pack |
| Bug 1734586 | 2021-10-09 | Fx95 | henry-x | Thunderbird | Instant Messaging | After using the tab context menu, the chat tooltip does not show |
| Bug 1734413 | 2021-10-08 | Fx95 | henry-x | Thunderbird | Toolbars and Tabs | TB version 91 context menu tab close does not work |
| Bug 583572 | 2021-10-07 | Fx95 | henry-x | Thunderbird | Message Reader UI | vCard attachments (multipart/mixed;) are not shown in the attachment list with inline view enabled |
| Bug 1734360 | 2021-10-06 | Fx95 | henry-x | Thunderbird | Mail Window Front End | App Menu Attachment submenu is empty |
| Bug 1731497 | 2021-09-30 | Fx94 | henry-x | Thunderbird | Toolbars and Tabs | Cannot close tab with middle mouse button click |
| Bug 1732307 | 2021-09-29 | Fx94 | henry-x | Thunderbird | General | Empty mail/components/im/themes |
| Bug 1728323 | 2021-09-23 | Fx94 | henry-x | Thunderbird | Preferences | Follow-up of bug 1711274: Missing fluent translations and other porting issues |
| Bug 1730740 | 2021-09-18 | Fx94 | henry-x | Thunderbird | Message Reader UI | multimessage view is not fully scrollable |
| Bug 1729314 | 2021-09-16 | Fx94 | henry-x | Thunderbird | Message Compose Window | Attachment bar is not accessible |
| Bug 1727304 | 2021-09-06 | Fx94 | henry-x | Thunderbird | Account Manager | nntp setup should be moved out of "Other accounts" |
| Bug 1723757 | 2021-09-03 | Fx93 | henry-x | Thunderbird | Message Compose Window | F6 key handler moves focus incorrectly for some elements. |
| Bug 1721352 | 2021-08-23 | Fx93 | henry-x | Thunderbird | Message Compose Window | Convert composition field role=button xul:label elements to html:button |
| Bug 1726429 | 2021-08-23 | Fx93 | henry-x | Thunderbird | Mail Window Front End | Download activity uses the wrong numbers for its progress bar |
| Bug 1725220 | 2021-08-12 | Fx93 | henry-x | Thunderbird | Mail Window Front End | Replace the junk mail info dialog with a support link |
| Bug 1718018 | 2021-08-11 | Fx93 | henry-x | Thunderbird | Address Book | Send out standard text/vcard Content-Type instead of text/x-vcard |
| Bug 1612035 | 2021-08-05 | Fx92 | glandium | Firefox Build System | General | lucet does not produce reproducible .so files |
| Bug 1722005 | 2021-08-04 | Fx92 | henry-x | Calendar | Calendar Frontend | Stop using "role" attribute for attendee icons. |
| Bug 1695039 | 2021-07-29 | Fx92 | henry-x | Calendar | E-mail based Scheduling (iTIP/iMIP) | invites do usually not show as styled anymore |
| Bug 1704110 | 2021-07-12 | Fx92 | emz | Core | Privacy: Anti-Tracking | Browser Tracking through Preflight Cache |
| Bug 1667372 | 2021-07-12 | Fx91 | henry-x | Thunderbird | Message Compose Window | implement/expose "clear formatting/styling" in the compose window |
| Bug 1719081 | 2021-07-08 | Fx91 | henry-x | Thunderbird | Toolbars and Tabs | activity indicator is missing its throbber icon in Customize Toolbar... dialog |
| Bug 1719116 | 2021-07-07 | Fx91 | henry-x | Calendar | Calendar Frontend | No gap between adjacent events in day/week views |
| Bug 1717417 | 2021-06-24 | Fx91 | henry-x | Thunderbird | Upstream Synchronization | Port bug 1700972 to Thunderbird - Remove profile-per-install onboarding UI |
| Bug 1667716 | 2021-06-24 | Fx91 | henry-x | Thunderbird | Message Reader UI | Attached vCard displayed if content type is text/x-vcard, but not if it is text/vcard |
| Bug 1713426 | 2021-06-04 | Fx91 | henry-x | Thunderbird | General | [x] Close button to remove Cc/Bcc address rows is not keyboard-accessible |
| Bug 1686298 | 2021-06-01 | Fx91 | henry-x | Thunderbird | Upstream Synchronization | Port Bug 1629113 to Thunderbird - Move caret browsing handler to tabbrowser.js (It's no longer possible to enable caret browsing on Thunderbird with F7) |
| Bug 1668904 | 2021-05-27 | Fx90 | henry-x | Calendar | Calendar Frontend | Calendar event display issue: event Location text not constrained to within graphical event block |
| Bug 1694820 | 2021-05-27 | Fx90 | henry-x | Calendar | Calendar Frontend | Calendar: time and event name not vertically aligned |
| Bug 1696613 | 2021-03-30 | Fx89 | henry-x | Thunderbird | General | remove elementslib |
| Bug 1674177 | 2021-03-25 | Fx89 | henry-x | Thunderbird | Message Compose Window | Address inputs allow entering recipients with leading comma again |
| Bug 1663427 | 2021-03-15 | Fx88 | henry-x | Thunderbird | General | Error when opening PDF attachment from message displayed in a window with "Open messages in: A new message window": document.getElementById("tabmail") is null |
| Bug 1694631 | 2021-03-11 | Fx88 | henry-x | Calendar | General | calendar tests should not look up elements by path |
| Bug 1694947 | 2021-03-11 | Fx88 | henry-x | Thunderbird | Address Book | starting with --addressbook is broken |
| Bug 1667338 | 2021-02-26 | Fx88 | henry-x | MailNews Core | Backend | nsIMsgMessageService.GetUrlForUri should return the URI, not use an out parameter for it |
| Bug 1683305 | 2021-02-25 | Fx88 | henry-x | Thunderbird | General | Remove Thunderbird usage of the XUL valign attribute |
| Bug 1673237 | 2020-11-04 | Fx84 | me | Core | SVG | ignore svg.disabled=false in about pages |
| Bug 1667948 | 2020-10-07 | Fx83 | gk | Firefox Build System | Android Studio and Gradle Integration | Creating fat .aar file breaks during SyncLibsAndUpdateGenerationID task creation |
| Bug 1653026 | 2020-10-06 | Fx83 | julianwels | Core | DOM: Security | Give HTTPS Only Mode users a way to unbreak a page |
| Bug 1647829 | 2020-10-02 | Fx83 | julianwels | Core | DOM: Security | HTTPS Only Mode Error page repeats forever when privacy.firstparty.isolate is enabled |
| Bug 444222 | 2020-09-16 | Fx82 | timhuang | Core | DOM: Core & HTML | window.name can be used as an XSS attack vector |
| Bug 1461454 | 2020-09-07 | Fx82 | tjr | Core | Audio/Video: Playback | Support Resist Fingerprinting in canPlayType and Media Capabilities APIs |
| Bug 1658265 | 2020-08-14 | Fx81 | ckerschb | Core | DOM: Security | Https-only: Consider exempting certain loads from being logged to the console |
| Bug 1642387 | 2020-08-12 | Fx81 | ckerschb | Core | DOM: Security | Avoid timeouts within HTTPS-Only Mode by sending background http request |
| Bug 1651197 | 2020-08-11 | Fx81 | julianwels | Core | DOM: Security | Learn More link in Error Page |
| Bug 1644152 | 2020-07-10 | Fx80 | ckerschb | Core | DOM: Security | HTTPS Only Mode in about:preferences |
| Bug 1585470 | 2020-07-10 | Fx80 | sysrqb | Core | WebRTC | Android cpu-features.c included twice when building GeckoView with --disable-webrtc |
| Bug 1644146 | 2020-06-27 | Fx79 | ckerschb | Core | DOM: Security | Change HTTPS Only Mode error copy to give the sense of "protection" |
| Bug 1642404 | 2020-06-23 | Fx79 | mcs | Toolkit | Application Update | add an option to show that an update is being downloaded |
| Bug 1642754 | 2020-06-18 | Fx79 | mcs | Toolkit | Application Update | Update prompts should not depend on whether an update was initiated manually |
| Bug 1640853 | 2020-06-15 | Fx79 | julianwels | Core | DOM: Security | HTTPS Only Mode - Use PermissionManager for Exceptions |
| Bug 1634602 | 2020-06-03 | Fx79 | tjr | Core | DOM: Core & HTML | exempt about:blank from privacy.resistFingerprinting (prefers-color-scheme) |
| Bug 1588549 | 2020-05-28 | Fx78 | mcs | Toolkit | Application Update | --disable-maintenance-service should exclude all maintenance service-related code |
| Bug 1640707 | 2020-05-26 | Fx78 | acat | Core | DOM: Security | Make sure whitelist_onions is disabled in test_isOriginPotentiallyTrustworthy.js |
| Bug 1638330 | 2020-05-20 | Fx78 | acat | Core | Networking | Intermittent TEST-UNEXPECTED-TIMEOUT | netwerk/test/unit/test_dns_disabled.js | Test timed out |
| Bug 1636411 | 2020-05-15 | Fx78 | acat | Core | Networking: DNS | Allow disabling DNS via pref |
| Bug 1633015 | 2020-04-27 | Fx77 | acat | Core | Networking: Cookies | Allow 'secure' cookies when set by .onion site |
| Bug 1626188 | 2020-04-11 | Fx77 | lsalzman | Core | Graphics: WebRender | load_shader.h is not generated deterministically |
| Bug 1404547 | 2020-03-05 | Fx75 | tsmith | Core | Sanitizers | [meta] Enable 'enum' UBSan check |
| Bug 1532486 | 2020-02-19 | Fx75 | morgan | Core | Audio/Video | Ensure media cache is memory-only when in Private Browsing Mode |
| Bug 1599226 | 2020-02-14 | Fx75 | tjr | Core | JavaScript Engine: JIT | Allow enabling Ion on Chrome content (including Extensions) but disabling it on web content |
| Bug 461204 | 2020-01-15 | Fx74 | tjr | Core | DOM: Core & HTML | Boundary delimiter for HTTP file posts is static. That is wrong according to RFC. |
| Bug 1607316 | 2020-01-11 | Fx74 | tjr | Core | Layout | Implement separate fingerprinting resistance treatment of @media interaction features for desktop and android |
| Bug 1534339 | 2019-12-04 | Fx73 | xeonchen | Core | DOM: Security | OriginAttributes.firstPartyDomain does not support IPv6 addresses |
| Bug 1589690 | 2019-11-28 | Fx72 | sstreich | Core | DOM: Security | Add to nsIPrincipal an API for query if it Holds an .Onion URI |
| Bug 1598647 | 2019-11-25 | Fx72 | acat | Core | DOM: Security | Set Origin to null with network.http.referer.hideOnionSource |
| Bug 1591259 | 2019-11-07 | Fx72 | emmamalysz | Firefox | General | BrowserGlue.jsm triggeres console log of Unhandled NS_ERROR_NOT_AVAILABLE (0x80040111, 2147746065) exception thrown from PushService lazy getter during "sessionstore-windows-restored" observer notification when dom.push.enabled == false |
| Bug 1581537 | 2019-11-04 | Fx72 | acat | Core | DOM: Core & HTML | Browser UI locale is leaked in several ways |
| Bug 1588515 | 2019-11-01 | Fx72 | mak | Firefox | General | TypeError: document.getElementById(...) is null in permanent private browsing mode |
| Bug 1590538 | 2019-10-30 | Fx72 | mak | Firefox | Address Bar | Copying a link and using "Paste & Go" results in error when HTTPS Everywhere add-on is installed |
| Bug 1554805 | 2019-10-06 | Fx71 | johannh | Firefox | Extension Compatibility | feed reader WX (Brief) not working with FPI enabled |
| Bug 1576254 | 2019-10-05 | Fx71 | tjr | Core | JavaScript: WebAssembly | Allow enabling WASM on Chrome content (including Extensions) but disabling it on web content |
| Bug 1583660 | 2019-10-03 | Fx71 | MatsPalmgren_bugz | Core | Layout: Form Controls | input type=range element not rendering on Android |
| Bug 1573276 | 2019-09-26 | Fx71 | acat | Firefox | Security | Certificate and network errors in sandboxed iframes completely broken (show XML Parsing Error) |
| Bug 1520177 | 2019-08-28 | Fx68 | tjr | Core | Disability Access APIs | mingw-clang has broken accessibility |
| Bug 1575670 | 2019-08-23 | Fx70 | toshi | Firefox Build System | General | Bump up mingw-w64 to take the fix for urlmon and unknwn.h |
| Bug 1560574 | 2019-08-21 | Fx70 | xeonchen | Core Graveyard | Networking: FTP | ftp:// on Windows can be used to leak the system time zone (Tor 30800) |
| Bug 1537955 | 2019-08-02 | Fx70 | tjr | Firefox | PDF Viewer | privacy.resistFingerprinting option makes PDFs rendering blurred |
| Bug 1561322 | 2019-07-30 | Fx70 | acat | Firefox | Untriaged | UI locale is detectable by button width |
| Bug 1564208 | 2019-07-10 | Fx70 | dholbert | Core | SVG | Setting `svg.disabled` to `true` causes extension icons to disappear |
| Bug 467035 | 2019-07-09 | Fx70 | acat | Core | XML | <!DOCTYPE> ignores contentaccessible, leaks DTD strings and therefore browser UI locale |
| Bug 1552706 | 2019-06-28 | Fx69 | tjr | Core | Security: Process Sandboxing | Update MinGW to add some missing #defines required by sandbox. |
| Bug 1562045 | 2019-06-28 | Fx69 | tjr | Firefox Build System | General: Unsupported Platforms | Disable jemalloc on mingw-clang builds because of mismatched alloc/dealloc |
| Bug 1561636 | 2019-06-27 | Fx69 | acat | Toolkit | Application Update | Intermittent updater failures on Win64 |
| Bug 1330467 | 2019-05-27 | Fx69 | xeonchen | Core | DOM: Security | When "privacy.firstparty.isolate" is true, double-key permissions to origin + firstPartyDomain |
| Bug 1480877 | 2019-05-17 | Fx68 | sysrqb | Firefox for Android Graveyard | General | Delete RECEIVE_BOOT_COMPLETED permission |
| Bug 1478438 | 2019-05-17 | Fx68 | sysrqb | Firefox for Android Graveyard | General | Remove unused mobile/android config variables |
| Bug 1506693 | 2019-05-14 | Fx68 | morgan | Firefox | PDF Viewer | PDFJS range-based requests violate FPI |
| Bug 1511434 | 2019-05-03 | Fx68 | cpeterson | Core | DOM: Security | privacy.resistFingerprinting: Change spoofed OS version to Windows 10 and macOS 10.14 |
| Bug 1535399 | 2019-04-26 | Fx68 | tjr | Firefox Build System | General: Unsupported Platforms | Add --enable-proxy-bypass-protection configure flag to mingw builds |
| Bug 1542309 | 2019-04-15 | Fx68 | acat | Core | DOM: Security | firstPartyDomain not set on top-level domain URLs |
| Bug 1433350 | 2019-04-05 | Fx68 | aceman | Thunderbird | General | As defense in depth, don't load user's name etc. into memory |
| Bug 1492587 | 2019-03-29 | Fx68 | xeonchen | Toolkit | UI Widgets | Ensure the date picker does not leak user locale when "privacy.spoof_english" == 2 |
Generated at: 2025-10-31 16:32 UTC