Firefox 115: some add-ons may be blocked from running on certain sites 😮

[pycrk]

I don’t know the condition beforehand, I checked it for the first time earlier.

[pebcak]

That field was empty up until recently.

[dalto]

@pebcak

Perhaps they are just rolling it out at different stages?

Uhh…mine is populated as well now. It also removed the site I had added to the list by hand.

That is interesting. I looked at it last night(About 14 hours ago) so it had to have changed since then. Nightly is self-updating to it could have come in via an update when I launched it.

[keybreak]

@dalto

Mine is empty. Oh, maybe because I have been testing this feature with the nightly version of Firefox? Perhaps it behaves differently?

It behaves exactly how it’s intended…That is how Mozilla or their higherups would want.

[pycrk]

updated firefox yesterday and just checked the quarantine list today. on the internet, some users also have this brazilian site in their list.

[pebcak]

@dalto

That is interesting. I looked at it last night(About 14 hours ago) so it had to have changed since then. Nightly is self-updating to it could have come in via an update when I launched it.

Exactly the same on my end. The field was empty last night for me.

What is more “interesting” is that I just cleared that field out.
Restarted the browser and … bam!!
They were back!

Looks like there is no way around it.

Would you mind testing this to confirm?

[anon49550872]

I know that caixa and BB are very problematic, they are banks from the government, so everything there is old, all kind of problems in their sites, apps and etc…
You need to install a module in the OS to be able to manage your account properly, and you can’t do that in Linux.

[pycrk]

i have try it and the values are back

[dalto]

@pebcak

Would you mind testing this to confirm?

Yes. It is in prefs.js so it overwrites your setting I guess.

EDIT: Wait prefs.js is where the settings are stored so it must actually be coming from somewhere else.

[pebcak]

It’s now in FF 115 as well.

I guess it came through the update earlier to day:

2023-07-08T09:24:16+0200] [ALPM] upgraded firefox (115.0-1 -> 115.0.1-1)

[dalto]

But where is it coming from?

Is is going to mozilla and reading the list? It shows it as a modified preference.

[anon49550872]

@dalto

Is is going to mozilla and reading the list? It shows it as a modified preference.

If that is the case, if you disconnect your PC from the Internet and open the browser, that list will be empty.

[dalto]

@anon49550872

if you disconnect your PC from the Internet and open the browser, that list will be empty.

But then I would suffer withdrawal symptoms from being disconnected from the forum…

[anon49550872]

Let me test, I’m running PSD so I’ll disable it too, then disconnect and test.
One sec.

[pebcak]

Good question!

@dalto

Is is going to mozilla and reading the list?

I have this connection in my outbound firewall (opensnitch):

TCP 56028:10.8.3.8 -> 34.149.100.209 (firefox.settings.services.mozilla.com):443

Could it be that?

[dalto]

@pebcak

Could it be that?

It could be. However, that also could be firefox telemetry or some other more benign query to mozilla.

[anon49550872]

It seems to be hardcoded…
Or cache? I didn’t clear the cache but I don’t think it is related to caching…

Edit: Internet was disconnected during the check above.

[anon49550872]

@pebcak

TCP 56028:10.8.3.8 → 34.149.100.209 (firefox.settings.services.mozilla.com):443

The problem is that you won’t be able to see the payload to confirm… Encrypted…

Edit: Let me block this URL to check: “https://firefox-settings-attachments.cdn.mozilla.net/”

Edit: I blocked firefox.settings.services.mozilla.com and firefox-settings-attachments.cdn.mozilla.net by editing /etc/hosts and the sites were still there…
DOH, DOT and QUIC are disabled here…

[pebcak]

@pebcak

I have this connection in my outbound firewall (opensnitch):

TCP 56028:10.8.3.8 -> 34.149.100.209 (firefox.settings.services.mozilla.com):443

I made a deny rule for the destination above.
Cleared that field.
Closed Firefox.
Restarted it.
They were back!

Now I’m seeing several other connections:

[ricklinux]

It’s probably delta’s website then.