Firefox 154 has been released, along with updates to previous long-term support branches—153.1.0, 140.14.0, and 115.39.0. Firefox 155, scheduled for release on September 1, will soon enter beta testing.
Key new features in Firefox 154 (1, 2, 3):
- The LNA (Local Network Access) specification has been extended to WebSocket connections. LNA restricts access to the local system (loopback, 127.0.0.0/8) or internal network (192.168.0.0/16, 10.0.0.0/8, etc.) when interacting with public websites. To access internal resources, the user must grant the web application special permissions, as such activity is used by attackers to carry out CSRF attacks on routers, access points, printers, corporate web interfaces, and other devices and services that accept requests only from the local network. When a site opens a WebSocket connection to a device on the local network, a confirmation dialog is now displayed to the user.
- The Smart Window mode now uses AI to recommend tab groups and assign names to each group. Smart Window provides a separate AI-powered interaction space, complementing the existing standard web navigation mode and private browsing mode.
- You can now disable cookie and site data clearing on an individual website basis, while still maintaining tracking protection and cookie-related restrictions for those websites.
- The page-wide translation feature now includes the content of iframes embedded within the page. Language identification is now available during page load.
- The "Manage AI" action has been added to the address bar for quick access to the AI settings section in the configurator.
- Forced page reloads (by pressing the refresh button while holding down the Shift key) now additionally clear the favicon cache contents.
- Significantly accelerated the operation of changing the position in the stream when viewing a video.
- The built-in PDF viewer implements highlighting of selected text, similar to how text is highlighted on web pages.
- By default, when creating new or recently unused profiles, the "Firefox View" button is no longer displayed in the panel. This button can be restored through the panel customization interface.
- The "text-box-trim" and "text-box-edge" CSS properties have been added, allowing precise control over the margins before and after text. "text-box-trim" specifies the trim area (top, bottom, or both sides), and "text-box-edge" specifies how the edges are trimmed.
- Added the sibling-index() and sibling-count() CSS functions for styling elements based on their position or number of siblings.
- Implemented an interface for entering time, shown when using elements And .
- The No-Vary-Search HTTP header has been implemented, allowing you to configure query caching rules based on the parameters passed in the URL (for example, you can exclude unimportant parameters when determining whether a cached version of a page exists).
- The JavaScript Iterator interface now supports synchronously executed methods Iterator.prototype.chunks (splits the iterator's elements into sequential disjoint groups), Iterator.prototype.windows (iterates over the iterator's elements using a sliding window), Iterator.prototype.includes (checks whether the iterator contains a specific element), and Iterator.prototype.join (joins all the iterator's elements into a single string).
- The JSON Viewer now displays the full path to the selected element at the bottom of the screen.
- In Firefox for Android Icons have been updated, the ability to select a file name and directory for saving the downloaded file has been provided, addresses in input fields are automatically saved, bookmark search has been sped up, and a Firefox Labs section has been provided for testing experimental features.
In addition to new features and bug fixes, Firefox 154 addresses 167 vulnerabilities, most of which are caused by memory management issues such as buffer overflows and accessing memory after it's been freed. These issues could potentially lead to malicious code execution when opening specially crafted pages.
Source: opennet.ru
