The Firefox 112 web browser has been released. In addition, an update to the long-term support branch, 102.10.0, has been formed. The Firefox 113 branch, which is scheduled for release on May 9, will soon be transferred to the beta testing stage.
Key innovations in Firefox 112:
- The "Reveal password" option has been added to the context menu shown when right-clicking on the password input field to display the password in plain text instead of asterisks.
- For Ubuntu users, the ability to import bookmarks and browser data from Chromium installed in the form of a snap package is provided (so far only works if Firefox is not installed from a snap package).
- In the drop-down menu with a list of tabs (called through the "V" button on the right side of the tabbed panel), it is now possible to close a tab by clicking on the list item with the middle mouse button.
- An element (key symbol) has been added to the panel content configurator to quickly open the password manager.
- The Ctrl-Shift-T keyboard shortcut used to restore a closed tab can now also be used to restore a previous session if there are no more closed tabs from the same session to reopen.
- Optimized the movement of items to a tab bar containing a large number of tabs.
- For strict users of the Enhanced Tracking Protection (ETP) mechanism, the list of known cross-site navigation tracking parameters to be removed from the URL (such as utm_source) has been expanded.
- Added information about the ability to enable the WebGPU API to the about:support page.
- Added support for DNS-over-Oblivious-HTTP, which preserves user privacy when querying a DNS resolver. To hide the user's IP address from the DNS server, an intermediate proxy is used, which redirects client requests to the DNS server and translates responses through itself. Enabled via network.trr.use_ohttp, network.trr.ohttp.relay_uri and network.trr.ohttp.config_uri in about:config.
- On Windows systems with Intel GPUs, when using software video decoding, downscaling operations are improved and the load on the GPU is reduced.
- By default, the U2F JavaScript API is disabled, which is designed to organize the work of two-factor authentication in various web services. This API has been deprecated and the WebAuthn API should be used instead to use the U2F protocol. The security.webauth.u2f setting is provided in about:config to return the U2F API.
- Added forced-color-adjust CSS property to disable forced color constraint on individual elements, leaving them full color control via CSS.
- The pow(), sqrt(), hypot(), log(), and exp() functions have been added to CSS.
- Added the ability to specify the value "overlay" to the "overflow" CSS property, which is similar to the "auto" value.
- The Clear button has been added to the interface for selecting dates in web form fields, which allows you to quickly clear the contents of fields with date and datetime-local types.
- Removed support for the IDBMutableFile, IDBFileRequest, IDBFileHandle, and IDBDatabase.createMutableFile() JavaScript interfaces, which are not defined in the specifications and are no longer supported in other browsers.
- Added support for the navigator.getAutoplayPolicy() method, which allows you to customize the behavior of autoplay (the autoplay parameter) in multimedia elements. By default, the dom.media.autoplay-policy-detection.enabled setting is enabled.
- Added CanvasRenderingContext2D.roundRect(), Path2D.roundRect() and OffscreenCanvasRenderingContext2D.roundRect() functions for rendering rounded rectangles.
- Added output of additional connection details to web developer tools such as Client Hello header encryption, DNS-over-HTTPS, Delegated Credentials, and OCSP.
- The Android version provides the ability to customize the behavior when opening a link in another application (should be prompted once or every time). Added a pull-to-refresh screen gesture to reload the page. Improved video playback with 10 bits of color per channel. Resolved an issue with YouTube full-screen video playback.
In addition to innovations and bug fixes, 112 vulnerabilities have been fixed in Firefox 46. 34 vulnerabilities are marked as dangerous, of which 26 vulnerabilities (collected under CVE-2023-29550 and CVE-2023-29551) are caused by memory problems, such as buffer overflows and access to already freed memory areas. These issues can potentially lead to malicious code being executed when specially designed pages are opened.
Source: opennet.ru