InformAction Forums

Two things that came in to mind when skimming through the white paper: The paper does not seem to mention what FireFox version they used, if any at all besides DeterFox and TorBrowser. Since FF85, FireFox has been doing cache partitioning , that supposedly prevents timing attacks on caches among oth...

Seems fine to have the protection as permission. However, none of the suggested renames make it any more clear whether one should check or uncheck the option to prevent this mysterious threat (not that the original tells anything either). So I assume there will be lot of questions about this in any ...

Feature request:

Advanced-tab checkbox to enable/disable PP0 protection, similarly as with XSS sanitation.


Bonus typo: (too lazy to make separate post)

nscl/content/prefetchCSSResources.js:37 "rarget"

Though I have hard time figuring out what is the use case for wrapCssAccess...

Get the same problem. Though, there are lots of pages where I see no prefetching even when I would expect it. Are all CSS resources supposed to be prefetched or what are the conditions?

This flew under my radar. Few notes: 1. window.opener is not a fresh window and _should_ always be patched before a new window can be opened (AFAIK). 2. If the opener and opened windows are not same-origin, trying to get canvas context will result in cross-origin block, whether opener is patched or...

michkov wrote: ↑

Sun Nov 01, 2020 6:34 am

https://content.blubrry.com/hoseasia/HoSEA014.mp3

I need to allow blubrry.com to get the mp3 to play.

For me the file plays just fine.

What permissions you need to allow for blubrry.com for the file to play? Is just media enough?

Some odd behaviour from Firefox going on here. When doing a redirect (webrequest) from urlA to a media file urlB, the currentSrc of the media element is initially set to be the original urlA. Though the url is later updated by Firefox to the correct one, this really seems like a bug. Unfortunately s...

Made another mistake. :oops: The domain for the iframe is seen as expected. I blame my confusing test case. However, there are still problems (affects rc4 too). The (http) domain for object is not seen on FF80, nor does the placeholder get placed. On FF81 it works as expected. The difference seems t...

Made a mistake. The iframes are not seen at all. The media checkbox is red on ALL pages regardless whether there is any media on the page or not. This seems to be a bug introduced in the YouTube fix of 11.0.44rc3.

Looks good. Thanks!

Should have pointed out that this indeed happens when soft reloading and the readyState is "completed". I can achieve this by using the "navigate to about:newtab and back". The patch does fix it for my test cases, but now your test case (the older one with alert) fires the onload twice. When doing n...

(On file: protocol. http: not affected.) Object and iframe sources are not seen. The domains are not listed in the popup. Affects FF80 (when document.write is used). Iframes are seen as media. (Media checkbox has red background when there is only iframe in the page.) Affects both FF 80 & 81. Iframes...

External and inline scripts run fine now.

However, onload event attribute in <svg> does not execute. load/DOMContentLoaded added with addEventListener do fire though.

Typo in staticNS.js:49 - pendingFetchPolicy should be pendingSyncFetchPolicy, I assume.

Still present in rc3. It's pretty hard to reproduce on FF81, but should happen quite often on FF80. And there doesn't seem to be anything wrong with your test case. Happens with that too. On FF81 the code hardly ever hits the document.write() due to the suspend working. On FF80 that is where it ends...