{"id":101544,"date":"2021-10-05T22:22:52","date_gmt":"2021-10-05T20:22:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-firefox-93"},"modified":"2021-10-05T22:22:52","modified_gmt":"2021-10-05T20:22:56","slug":"reliz-firefox-93","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/reliz-firefox-93","title":{"rendered":"Release of Firefox 93","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The release of the web browser Firefox 93 has taken place. Additionally, updates for long-term support branches 78.15.0 and 91.2.0 have been formulated. The Firefox 94 branch has entered beta testing, with the release scheduled for November 2. <\/p>\n
Key innovations: <\/p>\n
\n
Support for the AVIF (AV1 Image Format) image format, which utilizes intra-frame compression technologies from the AV1 video encoding format, is enabled by default. It supports both full and limited color gamut color spaces, as well as transformation operations (rotation and flipping). Animation is not yet supported. To adjust compliance with the specification, the option \"image.avif.compliance_strictness\" is proposed in about:config. The default value of the HTTP header ACCEPT has been changed to \"image\/avif,image\/webp,*\/*\".\n
The WebRender engine, written in Rust, has been made mandatory, allowing for a significant increase in rendering speed and a reduction in CPU load by offloading page content rendering operations, which are realized through shaders executed on the GPU. For systems with older graphics cards or problematic graphic drivers, WebRender applies a software rasterization mode (gfx.webrender.software=true). The option to disable WebRender (gfx.webrender.force-legacy-layers and MOZ_WEBRENDER=0) has been discontinued.\n
Improved support for the Wayland protocol. A layer has been added to address clipboard issues in environments based on the Wayland protocol. The update also includes changes that eliminate flickering when moving a window to the edge of the screen in multi-monitor configurations while using Wayland.\n
The built-in PDF viewer has implemented the ability to open documents with interactive XFA forms, commonly used in electronic forms from various banks and government institutions.
<\/center>\n
File download protection is enabled for files delivered over HTTP without encryption but initiated from pages opened via HTTPS. Such downloads are vulnerable to tampering due to transit traffic control, yet since they originate from HTTPS pages, users may mistakenly feel they are secure. When attempting to download such data, users will receive a warning that allows them to cancel the block if they choose. Additionally, downloading files from isolated iframes without the allow-downloads attribute specified is now prohibited and will be silently blocked.
<\/center>\n
The implementation of the SmartBlock mechanism has been improved to address issues on websites caused by the blocking of external scripts in private browsing mode or when enhanced tracking protection (strict) is activated. SmartBlock automatically replaces tracking scripts with placeholders that ensure the website loads correctly. The placeholders are tailored for several popular user tracking scripts listed in Disconnect. The new version includes adaptive blocking for Google Analytics scripts, Google ad network scripts, and widgets from Optimizely, Criteo, and Amazon TAM.\n
In private browsing modes and enhanced tracking protection (strict), additional protection for the HTTP header \"Referer\" has been enabled. In these modes, sites are now prohibited from using the Referrer-Policy HTTP header settings \"no-referrer-when-downgrade\", \"origin-when-cross-origin\", and \"unsafe-url\", which allow bypassing default settings to send the full URL in the \"Referer\" header to third-party sites. Recall that in Firefox 87, to block potential leaks of confidential data, the \"strict-origin-when-cross-origin\" policy was enabled by default, which trims paths and parameters from the \"Referer\" when sending requests to other hosts over HTTPS, sends an empty \"Referer\" when transitioning from HTTPS to HTTP, and sends the full \"Referer\" for internal transitions within the same site. However, the effectiveness of the change was questioned as sites could manipulate the Referrer-Policy to revert to the old behavior.\n
The Windows platform now supports automatic unloading of tabs from memory when the free memory level in the system reaches critically low values. First, the tabs consuming the most memory and those that the user has not accessed for a long time are unloaded. When switching to an unloaded tab, its content is automatically reloaded. This functionality is promised to be added in a future release for Linux.\n
The design of the download panel has been aligned with the overall visual style of Firefox.
<\/center>\n
In compact mode, the margins between the main menu elements, overflow menu, bookmarks, and browsing history have been reduced.
<\/center>\n
SHA-256 has been added to the algorithms available for HTTP Authentication, previously only MD5 was supported.\n
TLS ciphers using the 3DES algorithm are disabled by default. For example, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher suite is vulnerable to the Sweet32 attack. Support for 3DES can be restored by explicitly allowing it in the settings of older TLS versions.\n
On the macOS platform, the issue of session loss when launching Firefox from a mounted '.dmg' file has been resolved.\n
A user interface has been implemented for visually entering the date and time for the web form element .
<\/center>\n
For elements with the aria-label or aria-labelledby attribute, the meter role (role=\"meter\") has been implemented, allowing for the creation of numeric value indicators that change within a specified range (for example, battery charge indicators).
<\/center>\n
Support for the keyword \"small-caps\" has been added to the CSS property font-synthesis.\n
The method Intl.supportedValuesOf() has been implemented, returning an array of supported calendars, currencies, counting systems, and units of measurement.\n
Classes now have the ability to use static initialization blocks to group code that runs once during class processing: class C { \/\/ This block will run during class processing static { console.log('C\u2019s static block'); } }\n
Support for calling HTMLElement.attachInternals has been added for access to additional form management methods.\n
The attribute shadowRoot has been added to the ElementInternals method, allowing custom elements to access their separate root in the Shadow DOM, regardless of its state.\n
The createImageBitmap() method has added support for imageOrientation and premultiplyAlpha properties.\n
A global function reportError() has been added, allowing scripts to log errors to the console, simulating the occurrence of an uncatchable exception.\n
Improvements in the version for the Android platform:\n
\n
When running on tablets, buttons for 'forward', 'back', and 'reload page' have been added to the panel.\n
Automatic filling of usernames and passwords in web forms is enabled by default.\n
Support for using Firefox as a password manager to fill in logins and passwords in other applications has been added (enabled via 'Settings' > 'Logins and passwords' > 'Autofill in other apps').\n
A new page has been added at 'Settings' > 'Logins and passwords' > 'Saved Logins' > 'Add Login' for manually adding credentials to the password manager.\n
A new page has been added at 'Settings' > 'Data collection' > 'Studies and switch off', allowing users to opt out of participating in testing experimental features. <\/ul>\n<\/ul>\n<\/ul>\n
In addition to new features and bug fixes, Firefox 93 addresses 13 vulnerabilities, 10 of which are marked as critical. 9 vulnerabilities (grouped under CVE-2021-38500, CVE-2021-38501, and CVE-2021-38499) are caused by memory management issues, such as buffer overflows and accessing already freed memory areas. These issues could potentially allow an attacker to execute code when opening specially crafted pages. <\/p>\n
![\"Release](\"\/wp-content\/uploads\/2021\/10\/ac8a5db8c3fc808128bdf9f1f55ae081.jpg\")
<\/center>\n![\"Release](\"\/wp-content\/uploads\/2021\/10\/3f75c34eebaeb88821a98ffac017a27a.jpg\")
<\/center>\n![\"Release](\"\/wp-content\/uploads\/2021\/10\/9d4535d9518b73ba108b54ff8eba8e60.jpg\")
<\/center>\n![\"Release](\"\/wp-content\/uploads\/2021\/10\/6d508fa40eef90af2cbcb8ef32f61512.jpg\")
<\/center>\n![\"Release](\"\/wp-content\/uploads\/2021\/10\/ac84fb43313511a126fa0f27ce03754d.jpg\")
<\/center>\n![\"Release](\"\/wp-content\/uploads\/2021\/10\/36514a538d76bde853bf93195de4d6b9.jpg\")
<\/center>\n