Available Firefox 72. This is the first release for which the preparation time has been shortened from 6 to 4 weeks.
- Mode Picture-in-picture is enabled on Linux and macOS platforms.
- In the builds for OpenBSD is used file system isolation using unveil().
- Tracking protection began now by default blocks requests to resources identified in digital fingerprinting.
- Sites can no longer request users' permissions (for using geolocation, camera, notifications) until the user interacts with the page (mouse click, keyboard press, tap). Telemetry shows that
- notification request are extremely unpopular (only 1% are approved, 48% are declined, and in other cases the request is ignored). Over the month, users received one and a half billion requests, of which only 23.5 million were approved.
- re-requesting permission does not increase the likelihood that a user will agree. 85% of approvals were obtained on the first attempt.
- webmasters generally do not wait for the user to interact with the page, instead presenting requests immediately.
- Requests that wait for user interaction with the page are approved twice as often.
Starting with this release, if a request was made without waiting for user actions, it will only be shown as an icon in the address bar..
- The color of the scroll bars automatically adapts to the background color of the page.
- Support for image/webp has been added to the HTTP Accept header. Although this behavior contradicts the specification, it is applied in Chromium, therefore many sites check this header to determine if the browser supports the WebP format.
- Firefox can now использовать политики, размещённые в /run/user/$UID/firefox/policies.json
- Now includes the ability to use client certificates from the Windows store (security.osclientcerts.autoload).
- When telemetry sending is disabled, all corresponding data will be deleted from Mozilla servers within 30 days, as required by the California Consumer Privacy Act..
- The number of recent folders in the bookmark addition dialog has increased from 5 to 7. For those who need even more, a setting browser.bookmarks.editDialog.maxRecentFolders has been added.
- Fully redesigned bookmarks synchronization mechanism. This has resolved numerous issues: duplication, loss, and mixing of bookmarks, mixing of folders, problems with synchronizing new or moved bookmarks.
- The built-in ability to block image downloads from specific domains has been removed (it was deeply hidden and unpopular). This task is much better handled by extensions like uMatrix.
- Support for the outdated WebVR 1.1 API has been discontinued, which can now be replaced with the disabling the tracker blocking HTTP Public Key Pinning. A website could inform the browser that the SSL certificate in use should be considered valid only if issued by a specific Certificate Authority. Unfortunately, HPKP not only failed to gain popularity but also opened the door to extortion. An attacker could access the web server settings, deploy HPKP, and force clients to cache this information for a couple of years. When the rightful owner regained control and removed the attacker's certificate, clients lost the ability to connect to the server. Moreover, the technology turned out to be an easy way to 'shoot oneself in the foot,' inadvertently blocking access to one’s own site. A year ago, support for HTTP Public Key Pinning was discontinued in Chrome, and it was never implemented in IE, Edge, and Safari.
- Open the Pocket proxy server code, which allows access to sponsored content in new tabs without compromising user privacy.
- CSS:
- JavaScript: добавлена поддержка the NULL coalescing operator.
- API: support for FormDataEvent.
- Service Workers: added support for the property WindowOrWorkerGlobalScope.crossOriginIsolated.
- Developer tools:
- The debugger now supports conditional breakpoints (triggered when reading or modifying properties of an object).
- can now display can now show information about the request time, as well as the start and end of loading each resource.
- The responsive design mode now supports simulating different values for the meta viewport.
- Inspector , rather than taking focus. simulate different values prefers-color-scheme.
- The WebSockets inspector now shows measures the volume of received and transmitted data, as well as the format of ASP.NET Core SignalR.
- The 'Simple JavaScript Editor' has been removed as it has been successfully replaced by multiline input mode in the console..
Source: linux.org.ru
