Skip to main content
OverflowAI is here! AI power for your Stack Overflow for Teams knowledge community. Learn more

Questions tagged [firefox]

Firefox is a Web browser that is smaller, faster, and in some ways more secure than the Netscape browser from which much of its code was derived.

Filter by
Sorted by
Tagged with
1 vote
1 answer
72 views

CSP : Different hash for the same external library (Firefox vs Chrome)

During my implementation of a proof of concept for a CSP, I noticed that the hash value for the external library (jquery in this example) isn't the same between Firefox and Chrome and I can't figure ...
Marc's user avatar
  • 13
0 votes
1 answer
98 views

Issue uploading a file with cURL to WebSecurityAcademy Lab on PortSwigger.com

I want to solve an apprentice-level lab on PortSwigger.com focused on file upload vulnerabilities; the lab is called Remote code execution via web shell upload. The labs on PortSwigger.com encourage ...
Michael Sodeke's user avatar
2 votes
0 answers
98 views

How is this website able to determine my country? [closed]

Today I wanted to visit https://scp-wiki.wikidot.com/scp-4999 to conduct some scientific research. Upon loading the page, I was greeted with a text saying Russia (the country I'm in) and Belarus are ...
Gallifreyan's user avatar
1 vote
1 answer
311 views

How safe it is to view PDF file in browser without downloading the file into PC?

When I view the PDF file in a browser such as FireFox without downloading the file into my PC, does FireFox temporarily store the PDF file in my PC? I heard that FireFox has been sandbox heavily and ...
JUZ Aviewer's user avatar
0 votes
1 answer
162 views

Addressing Privacy Concerns Regarding Push Notifications

To facilitate push notifications, is it absolutely necessary for a browser to host servers to accomplish this? Each time I launch Firefox, prior to going to any websites, Firefox makes a connection to ...
Lonnie Best's user avatar
0 votes
0 answers
111 views

Is there a website that I can test TLS SCSV with?

I want to test TLS SCSV on a very old version of firefox with Insecure Version Fallback enabled. However, I can not find any server that uses the insecure fallback.
fabul's user avatar
  • 1
1 vote
0 answers
498 views

Are drive-by downloads and installs a significant threat to an average modern Android or Firefox for Windows user?

Today I learned that drive-by downloads and drive-by installations are or have been a thing. Yet there's something very counterintuitive about them if considered a real threat for modern smartphone or ...
jka's user avatar
  • 113
0 votes
1 answer
125 views

XSS not executing properly

Instead of receiving Alert(XSS) I get [object Object] The application is expecting a .csv file and the name of the file is being reflected. I put the original .csv file and then I remove it in order ...
ilich262's user avatar
1 vote
0 answers
779 views

Tool to Decrypt Chrome, Firefox and Edge login information [closed]

Im new to python but Ive created a couple of programs that can collect the user credentials for Google Chrome, Mozilla Firefox and Microsoft Edge and decrypt them then save the decrypted output to ....
Luke Jordan's user avatar
2 votes
1 answer
279 views

Where does Firefox webauthn softtoken save its key?

GitHub is pushing 2FA and offer mostly unreasonable choices; however there is webauthn and Firefox has a software version of it; so a proper security mode can be built. But in order to do this I need ...
Joshua's user avatar
  • 1,147
1 vote
0 answers
151 views

Has my browser been infected after visiting malicious link?

Today I typed in a URL of a site I know. Unfortunately I missed one letter of the TLD. I typed .co instead of .com. No problem, I'll quickly retype the URL. Unfortunately, this was not possible. The ...
Opifex's user avatar
  • 111
0 votes
3 answers
255 views

How to make Firefox warn about unknown certificate issuer?

Assume a corporate computer that has intrinsic software installed. It's a mitm setup that replaces the web page's certificate to one signed with a intrinsic software vendor's certificate that is ...
eltomek's user avatar
  • 101
0 votes
0 answers
37 views

How to check if a Firefox add-on is malicious? [duplicate]

How to check if a Firefox add-on is malicious ? I'm interested about this one currently : https://addons.mozilla.org/en-US/firefox/addon/istilldontcareaboutcookies/ It got a Github repo
J. Doe's user avatar
  • 1
-1 votes
1 answer
756 views

How can Firefox scan a downloaded file for virus

I was downloading a simple metasploit file from a CTF writeup when Firefox prevented the download: "File contains a virus or a malware". I was working on my Linux without any antivirus ...
RudeusGreyrat's user avatar
1 vote
0 answers
86 views

Does Firefox's addon/extension installer provide cryptographic authentication and integrity validation?

Does Firefox's built-in installer for addons/extensions validate its payload's authentication and integrity for all files it downloads before actually installing them? I avoid in-app updates because, ...
Michael Altfield's user avatar
2 votes
0 answers
226 views

How are the values of stored firefox credit cards encrypted? And how does one decrypt those?

While researching about the safety of web browsers I made my own program that can decrypt stored credentials, cookies, and other information of different browsers to see for myself how easy it is. ...
Void's user avatar
  • 21
5 votes
0 answers
217 views

Is chrome not blocking all third party cookies?

I opened a website 99acres.com in incognito windows on two browsers on a Macbook. Following are the settings: Chrome Version: 100.0.4896.75 (latest) Third Party cookies: Disabled Firefox Version: ...
Pardhu's user avatar
  • 151
0 votes
1 answer
480 views

Will a hacker be able to steal my passwords if they steal my Firefox config folder?

Is it really that simple? I guess having a master password will prevent that, but the drawback is that it is asked each time I open the web browser.
Alberto Salvia Novella's user avatar
0 votes
1 answer
118 views

Can Firefox master password dialog be used for phishing my master password?

I have used master password to protect my login information in Firefox. Whenever I first start Firefox and open a page requiring authentication information Firefox asks my master password before ...
pirho's user avatar
  • 101
0 votes
0 answers
20 views

Store login credentials securely with JavaScript [duplicate]

Today I have a web application that needs to store the user's email and password, so that when he opens the login screen, the authentication is done automatically. For this, our application saves the ...
Tom's user avatar
  • 174
0 votes
0 answers
52 views

How Firefox and Google password managers protect your password [duplicate]

Based in this post in Google Chrome help they claim that they encrypt my username and password with a secret key known only to my device. What is the algorithm used to generate this secret which is ...
John's user avatar
  • 21
0 votes
2 answers
188 views

What's the risk of keyboard languages being sent via Content-Language header?

The Android versions of Firefox and Chrome/Chromium and all derivatives (Ungoogled Chromium, Bromite, Brave) by default insert all the user's configured keyboard input languages into the Accept-...
ccpizza's user avatar
  • 291
2 votes
1 answer
582 views

With HTTPS-only mode in Firefox, may I still need HTTPS Eveywhere addon?

Firefox has a built-in toggle in settings to enforce HTTPS-Only mode. When enabled, the browser attempts to redirect to HTTPS every time and, if fails, blocks access to the website in the same way ...
Roman Riabenko's user avatar
0 votes
0 answers
44 views

How is Firefox Lockwise able to decrypt saved logins without primary password? [duplicate]

I was wondering how Firefox Lockwise is able to securely encrypt and decrypt saved logins across devices without using a primary password? As far as I understand, regardless of whether an encryption ...
arslancharyev31's user avatar
1 vote
1 answer
356 views

Firefox add-ons: Which permission(s) govern the ability to make additional network requests?

I'm considering installing a Firefox add-on (browser extension) which requests the permission Access your data for all websites. This add-on is not on the list of Mozilla's "actively monitored&...
Jon Schneider's user avatar
0 votes
0 answers
399 views

BING default search enginge Firefox malware?

Whenever I open Firefox, it starts with the BING search engine. The default search enginge of Firefox was set to "MyFireSearch" which I changed to Google. I also have no extensions that ...
Adam's user avatar
  • 147
4 votes
1 answer
642 views

How does Firefox protect Logins and Credit Card Data?

I have a question about how Firefox protects Login information (Website passwords) on the one hand and Credit Card data on the other. I noticed that there are two different approaches to how Login ...
jan's user avatar
  • 153
0 votes
1 answer
246 views

Suspicious connections by Firefox [closed]

In the middle of the night, I happened to look at Firefox's network traffic and I found this odd set of connections to k8s-poma-traefik-ext-fe-prod-iz1-lxa.poinfra.server.lan Does anyone know what ...
asker13's user avatar
  • 351
0 votes
0 answers
25 views

Why does Firefox claim a site has a "Potential Security Risk"? [duplicate]

When trying to go to https://www.pfizerpapconnect.com, the Firefox web browser claims there is a "Potential Security Risk" and pops up a page recommending to not proceed. Is there a real ...
Ben's user avatar
  • 1
2 votes
0 answers
579 views

How to harden portable Tor Browser installation (SELinux, sandbox)?

tldr How can I define a SELinux policy, that limits filesystem access of portable Tor Browser to its installation directory, say /home/user/.local/opt/tor-browser_en-US? How might Tor Browser be ...
reynor's user avatar
  • 21
6 votes
1 answer
886 views

How did Firefox get my passwords?

I just installed Firefox browser, while I have previously used Google Chrome as my main browser. I am using Windows 10. During the installation and setup process for Firefox, I was given the option to ...
Hymns For Disco's user avatar
3 votes
1 answer
658 views

Why does Firefox no longer recognise certificates issued by Multicert / Camerfirma?

Today I noticed that Firefox 88.0 beta (on macOS) is rejecting TLS certificates for many Portuguese websites – including most government websites – with the error SEC_ERROR_UNKNOWN_ISSUER. Example ...
Caesar's user avatar
  • 484
1 vote
1 answer
176 views

Are saved passwords in browsers secure, when stored online?

Where are saved passwords stored if you login to a browser, so they sync whenever you login to that browser on another device. Where and how do Google, Firefox etc. save the passwords? Obviously its ...
user2209430's user avatar
0 votes
0 answers
594 views

Global variables accessible to other websites opened in same tab

Today I found a security issue with Chrome (or maybe other browsers I haven't tested yet). What happens is that once you open a site and then open another site in the same tab, the previous site's ...
Aishwarya Shiva's user avatar
7 votes
1 answer
341 views

What exactly is CVE-2021-23978 (from MSFA2021-08 in Mozilla Firefox)?

A number of vulnerabilities were fixed in Firefox in the latest update. MSFA2021-08 describes it only as "memory issues that may be exploitable", and doesn't give any information: Mozilla ...
forest's user avatar
  • 66.8k
93 votes
5 answers
16k views

Why does my IT department block Firefox?

We received a message from the IT bods this week stating: Summary of the issue: IT will disabling and blocking the use of the browser Firefox next Thursday the 03.12.20 on all IT managed devices. Due ...
Sam's user avatar
  • 683
2 votes
0 answers
264 views

What is the threat-model of a malicious browser-extension accessing the data of *another browser-extension* that is security-critical?

Modern password-managers are moving towards a "fully-in-the-browser" model (see: historical RCE on LastPass, and now 1Password is also moving towards 1Password X as "the future" ...
ELLIOTTCABLE's user avatar
1 vote
1 answer
1k views

Firefox pretending to update itself, but actually not doing it, and thus being a risk for security - what am I missing?

I am a long-time Firefox user and remember that usually the UAC prompt popped up when Firefox updated itself. Some months ago (or is it years?), Firefox obviously changed the way it updates itself: I ...
Binarus's user avatar
  • 587
7 votes
2 answers
654 views

What impact does an installed extension have on the browser fingerprint (uniqueness)?

Motivation I want to develop a custom, local Firefox extension and investigate, if its installation has any impact on the browser fingerprint. Background Some time (years?) ago, there were articles ...
bela53's user avatar
  • 173
1 vote
0 answers
165 views

What, if anything, are the consequences of temporarily enabling and then disabling WebRTC in Firefox?

For security and privacy purposes, it's best to keep WebRTC disabled if you aren't using it. Firefox makes this easy by simply setting media.peerconnection.enabled to false. Due to COVID-19, the use ...
End Antisemitic Hate's user avatar
4 votes
1 answer
819 views

Effect of Firefox's "Responsive Design Mode" on the browser's fingerprint

Today I switched ON the "Responsive Design Mode" under the "Web Developer" Section of the Firefox menu, and from the dropdown menu selected "iPhone X/XS iOS 12". So now ...
user's user avatar
  • 275
1 vote
0 answers
675 views

CA certificate somehow not taken by browsers on android [closed]

This is a follow up question related to this answer. In short: I am importing the self signed Root CA certificate into android system via Settings -> Security -> Trusted Credentials -> ...
woodz's user avatar
  • 131
0 votes
1 answer
842 views

DNS spoofing protection in Chrome and Firefox

I'm using hostapd to setup a wireless access point and dnsmasq as a DNS/DHCP server. I defined in dnsmasq to reply with the IP of the access point (10.0.10.1) when it receives a query for www....
Giannis Pappas's user avatar
2 votes
2 answers
6k views

Where to put SAN

Where SAN means: Subject Alternative Name. I feel I have a basic misunderstanding in which certificate the SAN stuff shall go: ca or server or both or what? It might be 3 Years or more in the past, ...
woodz's user avatar
  • 131
0 votes
1 answer
729 views

What can be the risks of opening mdb files in windows using microsoft access? [closed]

I have download file.mdb from internet. When I click to open it, firefox tells me that mdb is an executable file and can harm my computer! How can this file harm my computer and is it just for mdb ...
Rembo's user avatar
  • 17
1 vote
1 answer
817 views

Firefox does not trust Burp Suite's certificates in case of accessing sharepoint online

I want to investigate requests/responses between firefox and some private mysite.sharepoint.com site which I could access using my microsoft's email and password. For this I've configured Burp Suite'...
Gryu's user avatar
  • 113
1 vote
1 answer
310 views

Why did browser authors not make 127.0.0.1/localhost-hosted webpages skip the referrer?

For a long time, I was so convinced that 127.0.0.1/localhost-hosted webpages, that is, with URLs such as: http://127.0.0.1/MySecretControlPanel/sensitive.php?stuff=goes&here=dude ... did not ...
Solace's user avatar
  • 11
0 votes
0 answers
119 views

Domain Joined computer doesn't browser properly with any website with Let's Encrypt CA cert

Navigating to any website with Let's Encrypt CA cert and even after enabling the HTTPS Everywhere addon, I'm getting "Your connection is not private". Getting this error from all the browser except ...
Nɪsʜᴀɴᴛʜ ॐ's user avatar
0 votes
1 answer
250 views

Are security scrutinies conducted by independent agencies on open source software like Ubuntu or Mozilla Firefox?

Any intentional malware injected into open source software by the same people who are developing them may eventually get known as the source code is open to the public. However, if the code base is ...
user15740's user avatar
  • 111
4 votes
2 answers
971 views

Effect of Script tag inside HTML comment

I recently participated in a CTF and solution of that CTF is based on this weird behavior of browser. In First case when I am including script tag inside an HTML comment and without closing that ...
Monu's user avatar
  • 227

1
2 3 4 5
8