{"id":106396,"date":"2023-01-19T01:17:32","date_gmt":"2023-01-18T23:17:33","guid":{"rendered":"https:\/\/prohoster.info\/?p=106396"},"modified":"2023-01-19T01:19:48","modified_gmt":"2023-01-18T23:19:48","slug":"reliz-firefox-109","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/reliz-firefox-109","title":{"rendered":"Release of Firefox 109","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The release of web browser Firefox 109 has occurred. Additionally, an update for the long-term support branch \u2014 102.7.0 has been formed. The Firefox 110 branch will soon enter beta testing, with its release scheduled for February 14.<\/p>\n
Key innovations in Firefox 109:<\/p>\n
\n
Support for the third version of the Chrome manifest, which defines the capabilities and resources available for extensions written using the WebExtensions API, is enabled by default. Support for the second version of the manifest will be maintained in the foreseeable future. Since the third version of the manifest has faced criticism and may disrupt the functionality of certain content-blocking and security extensions, Mozilla has moved away from ensuring full compatibility with the manifest in Firefox and has implemented some features differently. For instance, support for the old blocking mode of the webRequest API has not been terminated, and the new declarative content filtering API that replaced it in Chrome is not used. The support for granular permission request modeling has also been implemented somewhat differently, whereby an extension cannot be activated immediately for all pages (the 'all_urls' permission has been removed). In Firefox, the final decision on granting access is given to the user, who can selectively decide which extension can access their data on a specific site. A 'Unified Extensions' button has been added to the interface for managing permissions, allowing users to grant and revoke an extension's access to any site. Permission management only applies to extensions based on the third version of the manifest, while granular access control is not available for those based on the second version.\n
<\/center><\/li>\n
The Firefox View page has improved the layout of empty sections with recently closed tabs and tabs that are open on other devices.<\/li>\n
The list of recently closed tabs displayed on the Firefox View page has added buttons for removing individual links from the list.
<\/center><\/li>\n
A feature has been added to display the entered search query in the address bar, instead of showing the search engine's URL (i.e., the keys are shown in the address bar not only during input but also after addressing the search engine and displaying results related to the entered keys). This feature is currently disabled by default and requires setting the 'browser.urlbar.showSearchTerms.featureGate' option in about:config to activate.
<\/center><\/li>\n
The date picker dialog for the <input> field with types «date» and «datetime» has been adapted for keyboard management, ensuring proper support for screen readers and enabling keyboard shortcuts for navigating the calendar.<\/li>\n
The experiment with the built-in Colorways extension to change the browser's appearance has concluded (a collection of color themes was offered for the content area, panels, and tab switching bar). Access to previously saved color themes can be obtained on the «Add-ons and themes» page.<\/li>\n
On systems with GTK, the ability to move multiple files simultaneously within the file manager has been implemented. The moving of images from one tab to another has been streamlined.<\/li>\n
In the automatic clicking system for banners requesting cookie usage permissions on websites (cookiebanners.bannerClicking.enabled and cookiebanners.service.mode in about:config), the option to add websites to an exceptions list for which auto-clicking does not apply has been implemented.<\/li>\n
By default, the setting network.ssl_tokens_cache_use_only_once is enabled to prevent the reuse of session tickets in TLS.<\/li>\n
The setting network.cache.shutdown_purge_in_background_task has been enabled, addressing the issue of correctly terminating file input\/output when shutting down.<\/li>\n
An item («Pin to toolbar») has been added to the context menu of extensions for pinning the extension button to the toolbar.<\/li>\n
Firefox has been enabled as a document viewer, selectable in the system through the context menu «Open With».<\/li>\n
Information about screen refresh rates has been added to the about:support page.<\/li>\n
Settings for ui.font.menu, ui.font.icon, ui.font.caption, ui.font.status-bar, ui.font.message-box, etc., have been added to override system fonts.<\/li>\n
By default, support for the scrollend event is enabled, generated when the user stops scrolling (when the position ceases to change) in Element and Document objects.<\/li>\n
Access partitioning through the Storage API is provided when processing third-party content, regardless of the Storage Access API.<\/li>\n
The range element has been updated to support the list attribute, which passes the ID of the element containing a list of predefined values suggested for input.<\/li>\n
The CSS property content-visibility, used to exclude unnecessary rendering of areas outside the viewport, has added the value ‘auto’, where visibility is determined by the browser based on the proximity of the element to the edge of the visible area.<\/li>\n
In the CSS type , which defines default values for the colors of various page components, support has been added for Mark, MarkText, and ButtonBorder values.<\/li>\n
Web Auth now supports authentication using the CTAP2 (Client to Authenticator Protocol) protocol with tokens based on USB HID. Support is not enabled by default and can be activated with the security.webauthn.ctap2 parameter in about:config.<\/li>\n
In developer tools, the JavaScript debugger has added a new breakpoint type that triggers upon entry to the scrollend event handler.<\/li>\n
Support for the «session.subscribe» and «session.unsubscribe» commands has been added to the WebDriver BiDi remote control protocol.<\/li>\n
Windows builds now include the use of the ACG (Arbitrary Code Guard) hardware protection mechanism to block exploits in processes that handle multimedia content playback.<\/li>\n
On macOS, the behavior of the Ctrl\/Cmd + trackpad or Ctrl\/Cmd + mouse wheel combinations has been changed to scroll (as in other browsers), rather than zoom.<\/li>\n
Improvements in the Android version:\n
\n
When viewing fullscreen video, the address bar is disabled during scrolling.<\/li>\n
A button has been added to undo changes after a pinned site has been removed.<\/li>\n
The search engine list is updated after changing the language.<\/li>\n
A crash occurring when a large chunk of data is placed in the clipboard or address bar has been resolved.<\/li>\n
The performance of canvas element rendering has been improved.<\/li>\n
An issue with video calls, which could only use the H.264 codec, has been resolved.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
In addition to new features and bug fixes, Firefox 109 closes 21 vulnerabilities. Of these, 15 are classified as critical, with 13 of them (identified as CVE-2023-23605 and CVE-2023-23606) caused by memory management issues, such as buffer overflows and accessing freed memory areas. These issues could potentially allow an attacker to execute code when visiting specially crafted pages. The vulnerability CVE-2023-23597 is due to a logical error in the code for creating new child processes, allowing a new process to be launched in the file:\/\/ context to read arbitrary file contents. The vulnerability CVE-2023-23598 stems from an error in handling drag-and-drop actions in the GTK wrapper and allows reading arbitrary file contents through a DataTransfer.setData call.<\/p>\n
![\"Release](\"\/wp-content\/uploads\/2023\/01\/379a04e0824f9abb70064332816ff117.jpg\")
<\/center><\/li>\n![\"Release](\"\/wp-content\/uploads\/2023\/01\/085f3e280e25f465f28341608285e7a7.jpg\")
<\/center><\/li>\n![\"Release](\"\/wp-content\/uploads\/2023\/01\/10094f895450b87c36ddd40e5f28fe1c.jpg\")
<\/center><\/li>\n