web browser release and Firefox 68.3 for the Android platform. In addition, an update has been long term support . Coming soon to the stage the branch of Firefox 72, which is scheduled for release on January 7 (project for a new 4 week ).
:
- a new “about:config” page interface, which is a service web page that opens inside the browser, written in HTML, CSS and JavaScript. Page elements can be arbitrarily selected with the mouse (including several lines at once) and placed on the clipboard without using the context menu. The top search bar has been preserved and expanded with the ability to add new variables. Additionally, support for searching through a regular mechanism is implemented, which is also used for searching on ordinary pages with a step-by-step search for matches.
For each setting, a button has been added that allows you to invert variables with boolean values (true/false) or edit string and numeric variables. For user-modified values, a button has been added to return the changes to the default value.
After opening about:config, by default, the elements are not shown and only the search bar is visible, and to view the entire list, you need to click the "Show all" button. In settings option "general.aboutConfig.enable", return access to the about:config page, if it was optionally disabled at the build stage;
- by default, a new interface for viewing TLS certificates, accessible through the "about: certificate" service page and the "Tools > Page Info > Security > View Certificate" menu. The implementation of the certificate viewing interface has been completely rewritten using JavaScript and standard web technologies, and is also aligned with the styling of Firefox Quantum. If earlier a separate window was opened to view certificates, now the information is displayed in a tab in a form resembling an add-on .
- address bar layout. The most notable change was the move away from displaying a full-width list of recommendations in favor of an explicitly labeled drop-down box. The proposed changes continue the development of the new implementation of the Quantum Bar address bar, which appeared in Firefox 68 and is distinguished by a complete rewrite of the code with the replacement of XUL/XBL with the standard Web API. At the first stage, the design of Quantum Bar completely repeated the old address bar and the changes were limited only to internal processing. Now work has begun on improving the appearance. Changes are currently disabled by default and require activation via the "browser.urlbar.megabar" setting in about:config.
- launching the browser in kiosk mode, which is activated by specifying the “-kiosk” option on the command line and leads to the ability to work only in full screen mode. The display of interface controls, pop-up windows, context menus, and page loading status indicators (displaying links and the current URL) is blocked. Keyboard input is severely restricted, such as turning off the processing of the Alt and Ctrl keys, which prevents you from exiting the browser, switching to another application, or opening another site. The mode can be used to organize the operation of various stand-alone terminals, advertising stands, demonstration panels and other systems limited to working with one site / web application.
- In the system add-on included with the browser (previously the add-on was shipped as Lockbox), the “about:logins” interface for managing saved passwords, subdomain recognition appeared when autofilling password entry forms. Firefox Monitor warnings about compromised accounts are also implemented for users with screen readers.
- Windows, Linux, and macOS builds include a native MP3 decoder.
- Added display of notifications about code blocking for cryptocurrency mining in the advanced mode of movement tracking protection. In the panel shown when clicking on the icon from the shield images in the address bar, the counter of blocked trackers is displayed.
- For Windows users, the ability to view video in Picture-in-Picture mode is enabled by default, allowing you to detach the video in the form of a floating window that remains visible while navigating in the browser. To view in this mode, you must click on the tooltip or in the context menu displayed when you right-click on the video, select "Picture in picture" (in YouTube, which substitutes its own context menu handler, you should double-click the right mouse button or click with the Shift key pressed). On non-Windows systems, mode support can be enabled in about:config using the "media.videocontrols.picture-in-picture.enabled" option.
- support for nested layering of page elements (), which significantly improves the flexibility of building grid-aligned page layouts by providing the ability to define child elements anchored to parent cells (placing a separate grid inside a cell). Nested grids are defined using the value "' in the properties 'grid-template-columns' and 'grid-template-rows'. Support for nested grids has also been added to the DevTools Grid Inspector.
- Property added to CSS A that allows the element to span all columns.
- In a CSS property added the ability to define a visibility limiting area specified using the function в svg outline.
- the ability to take into account the ratio of the aspect ratio, defined through the property , for the "height" and "width" HTML attributes in the img tag.
- Method added to JavaScript , which returns only already fulfilled or rejected promises, ignoring pending promises (allows you to wait for the result of execution before running other code).
- Implemented class (previously only the class ) that defines the elements in the notation . A corresponding MathML DOM tree has also been added with which mathmlEl.style and global event handlers can be used.
- Constructor added to DOM to create a StaticRange object representing a piece of DOM content.
- Added API A that provides the means to customize the media playback information block in the notification area. Through this API, a web application can not only display a notification about the start of playing a new song, but also organize control from the notification area or through the screen saver interface, for example, place buttons for pausing, moving along the stream, or moving to the next song.
- API for add-on developers handling failures when loading data. Pop-ups opened by extensions via the windows.create call will display the extension's name instead of the extension's URL ("moz-extension://").
- Added extension support to WebGL , which allows one call to render to several viewports at once (for example, useful for stereo output in WebXR);
- The interface for inspecting network activity has the ability to analyze the stages of processing a network request with a separate display of the resolution time in DNS, establishing a connection, sending data and receiving a response. Information is provided through the new Timing tab in the right sidebar.
- In the default network activity tracking interface mode of inspecting WebSocket connections with the ability to suspend active connections.
- Added to Network Monitor full-text search in request/response bodies, cookies and headers, as well as implemented blocking the loading of certain URLs by adding filters with the necessary masks.
- Implemented in the web console editing, which allows you to enter JavaScript constructions divided into several lines with their execution not by pressing Enter, but by clicking on the Run button. The mode is designed as a sidebar displayed after clicking on the "split pane" icon in the right part of the input field or through the keyboard shortcut Ctrl + B.
- The JavaScript debugger provides values of variables according to the place of their use in the code, implemented event log and added the ability to disable with breakpoints (devtools.debugger.features.overlay in about:config).
- Firefox 68.2 corrective update has been prepared for Android. Recall that the formation of new significant releases of Firefox for Android has been discontinued. To replace Firefox for Android codenamed Fenix (distributed as ) a new browser for mobile devices using the GeckoView engine and the Mozilla Android Components library set.
The reduction in the number of critical vulnerabilities is due to the fact that memory problems, such as buffer overflows and reversal of already freed memory areas, are now marked as dangerous, but not critical. The new release fixes 13 such issues that could potentially lead to malicious code execution when opening specially designed pages.
In addition to innovations and bug fixes in Firefox 71, , of which 17 (collected under и ) are flagged as potentially allowing malicious code to be executed when specially designed pages are opened. Notably, memory issues such as buffer overruns and reversal of already freed memory areas are now flagged as dangerous, but not critical.
Source: opennet.ru