The release of the Firefox 92 web browser has taken place. In addition, updates have been formed for the long-term support branches — 78.14.0 and 91.1.0. The Firefox 93 branch has entered the beta testing stage, with its release scheduled for October 5.
Key innovations:
- The ability to automatically redirect to HTTPS has been added, using the record "HTTPS" in DNS as an analogue of the HTTP Alt-Svc header (HTTP Alternate Services, RFC-7838), which allows server to define an alternative way to access the site. When sending DNS queries, in addition to the "A" and "AAAA" records to determine (the key to connect to is specified, and iroh finds the associated host and establishes an encrypted connection using the QUIC protocol). Direct P2P connections are established whenever possible, but if not, it falls back to using relays, which are also employed for host discovery by keys. You can run your own relay or connect to public relays supported by the community., the DNS record "HTTPS" is now also requested, through which additional connection setup parameters are transmitted.
- Support for proper video playback in full color range (Full RGB) has been implemented.
- WebRender is enabled by default for all users on Linux, Windows, macOS, and Android, without exceptions. In the Firefox 93 release, support for options to disable WebRender (gfx.webrender.force-legacy-layers and MOZ_WEBRENDER=0) will be discontinued, and this engine will become mandatory. WebRender is written in Rust and allows achieving significant increases in rendering speed and reduced CPU load by offloading rendering operations performed on the GPU through shaders executed in the GPU. For systems with older graphics cards or problematic graphic drivers, a software rasterization mode (gfx.webrender.software=true) will be used in WebRender.
- The design of error information pages for certificates has been redesigned.

- Work related to the restructuring of JavaScript memory management has been incorporated, which has improved performance and reduced memory consumption.
- The issue with decreased performance in tabs processed in the same process as the tab with an open alert() dialog has been resolved.
- In builds for macOS: support for ICC v4 color profile images has been added, a menu item for invoking the macOS Share function has been added to the File menu, and the style of the bookmarks panel has been brought closer to the overall style of Firefox.
- The CSS property "break-inside", which allows configuring the behavior of breaks in fragmented output, has been updated to support the parameters "avoid-page" and "avoid-column" to prevent page and column breaks in the main block.
- The CSS property font-size-adjust features a syntax with two parameters (e.g., 'font-size-adjust: ex-height 0.5').
- The @font-face CSS rule now includes the size-adjust parameter, allowing the scaling of glyph sizes for a specific font style without changing the value of the CSS property font-size (the area under the character remains the same, but the size of the glyph in that area changes).
- Support for the CSS property accent-color has been added, which allows you to specify the color of the element selection indicator (e.g., the background color of a selected checkbox).
- The CSS property font-family now supports the system-ui parameter, which, when specified, uses glyphs from the default system font.
- JavaScript has introduced the Object.hasOwn property, which is a simplified version of Object.prototype.hasOwnProperty implemented as a static method. Object.hasOwn({ prop: 42 }, 'prop') // → true
- The parameter 'Feature-Policy: speaker-selection' has been added, allowing control over WebRTC's access to audio output devices such as speakers and headphones.
- For custom HTML elements, the disabledFeatures property has been implemented.
- The ability to track text selection in and
In addition to new features and bug fixes, Firefox 92 has resolved 8 vulnerabilities, of which 6 are marked as severe. 5 vulnerabilities (grouped under CVE-2021-38494 and CVE-2021-38493) are caused by memory management issues, such as buffer overflows and accessing already freed memory areas. These problems could potentially allow the execution of malicious code when visiting specially crafted pages. Another critical vulnerability, CVE-2021-29993, allows UI elements to be spoofed in the Android version through manipulations with the 'intent://' protocol.
The beta release of Firefox 93 includes support for AVIF (AV1 Image Format), which utilizes intra-frame compression technologies from the AV1 video encoding format.
Source: opennet.ru

