# mozilla Published articles for mozilla. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## В AI-режиме браузера Firefox появится поддержка модели Mistral Small 4 DevFeed: [В AI-режиме браузера Firefox появится поддержка модели Mistral Small 4]() Original publisher: [Read original article]() Author: daniilshat Published: 2026-09-17T20:18:38Z Content type: news Language: ru Sources: [Tagir Valeev]() Topics: [Artificial Intelligence](), [Firefox](), [Mozilla](), [Large Language Model](), [Mixture of Experts (MoE)](), [qwen]() Tags: [ai](), [firefox](), [gemini](), [llm](), [mistral](), [moe](), [mozilla](), [qwen](), [small](), [smart-window](), [tag-13e2af703774](), [tag-1cd610c0e518](), [tag-355298b248d9](), [tag-86b843454893](), [tag-a1312fd2c7ff](), [tag-d8952f30fc4a](), [tag-f76fc7fe610f](), [window]() ### AI overview Mozilla has partnered with Mistral to bring the Mistral Small 4 model to Firefox Smart Window's AI mode. The feature will initially be available in the United States, Canada, and France. Mozilla selected the multimodal mixture-of-experts model after internal testing, citing its multilingual support, and says the partnership helps avoid tying Firefox users to a single model provider. ### Source excerpt Mozilla и французская компания Mistral заключили партнёрство, в рамках которого модель Mistral Small 4 появится в AI-режиме Firefox Smart Window. На первом этапе нейросеть станет доступна в США, Канаде и Франции. Читать далее ## It's Okay to Break Things: Reflections on Khan Academy's Healthy Hackathon DevFeed: [It's Okay to Break Things: Reflections on Khan Academy's Healthy Hackathon]() Original publisher: [Read original article]() Author: Khan Academy Published: 2017-03-06T23:00:00Z Content type: article Language: en Sources: [Khan Academy]() Topics: [Hackathon](), [Software Engineering](), [API](), [Web]() Tags: [api](), [collaboration](), [engineering](), [equity](), [hackathon](), [mozilla](), [news](), [reflections](), [software-engineer](), [web-frontend]() ### AI overview Kimerie Green reflects on participating in Khan Academy's internal Healthy Hackathon while working as a Software Engineering Fellow. She describes building Read-to-Me, an experimental project using Mozilla's Web Speech API to read Perseus widget content aloud for early learners. The project was not shipped because it needed further code review and design work, but it provided lessons about curiosity, collaboration, and software engineering. ### Source excerpt By Kimerie Green For the past few months, I have been working as a Software Engineering Fellow at ... Read more ## Security updates for Tuesday DevFeed: [Security updates for Tuesday]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-15T13:10:46Z Content type: news Language: en Sources: [LWN.net]() Topics: [Security](), [Debian](), [Fedora](), [Ubuntu](), [Linux](), [Grafana](), [nginx]() Tags: [debian](), [grafana](), [hat](), [java](), [linux](), [mozilla](), [network](), [nginx](), [openssl](), [php](), [podman](), [python](), [rust](), [security](), [systemd](), [ubuntu](), [updates](), [vim]() ### AI overview Debian, Fedora, Mageia, Red Hat, SUSE, and Ubuntu issued security updates for a broad range of packages and components, including Linux-related tools, libraries, servers, programming environments, and desktop software. ### Source excerpt Security updates have been issued by Debian (network-manager-l2tp and urwid), Fedora (perl-Dancer2, perl-Data-Entropy, perl-DBI, perl-Protocol-HTTP2, podman-tui, rust-lru, and rust-lru0.16), Mageia (bzip2, cups-filters, libcupsfilters, libssh2, perl-Authen-SASL, perl-HTML-FormFu, tar, unzip, and zip), Red Hat (grafana and image-builder), SUSE (389-ds, acl, attr, apache2-mod_auth_openidc, apr-util, aws-nitro-enclaves-cli, bzip2, c-ares, clamav, cpio, curl, dhcpcd, dovecot23, dovecot24, dracut, emacs, fuse-overlayfs, go1.25-openssl, go1.26-openssl, google-cloud-sap-agent, google-osconfig-agent, govulncheck-vulndb, gstreamer-devtools, gzip, helm, java-17-openjdk, java-21-openjdk, java-25-openjdk, jq, libBasicUsageEnvironment2, libgpg-error, libidn, librest, libusb-1_0, libvirt, LibVNCServer, libzypp, zypper, lkl, mcphost, MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen, MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen, MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen, msgpack-c, multipath-tools, NetworkManager, openexr, openssl-3, perl-Protocol-HTTP2, perl-URI, php-composer2, postgresql14, postgresql15, postgresql16, postgresql17, postgresql18, python-aiohttp, python-cryptography, python-h2, python-ruff, python-sqlparse, python311, python312, python39.SUSE_SLE-15-SP3_Update, rav1e, rpcbind, sssd, systemd, tomcat, tomcat11, ucode-intel, udisks2, vim, and wicked2nm), and Ubuntu (cgit, dracut, freeciv, konsole, libinput, linux-azure, linux-nvidia-7.0, nginx, vips, and yelp). ## Firefox 157 Beta Released With Latest Enhancements DevFeed: [Firefox 157 Beta Released With Latest Enhancements]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-15T12:31:03Z Content type: release Language: en Sources: [Phoronix]() Topics: [Firefox](), [Mozilla](), [CSS](), [Nova](), [Playback](), [HTML](), [ui]() Tags: [audio](), [css](), [desktop-linux](), [firefox](), [html](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [mozilla](), [nova](), [open-source-graphics](), [phoronix](), [phoronix-test-suite](), [playback](), [release](), [ubuntu-benchmarks](), [ubuntu-hardware](), [ui]() ### AI overview Firefox 157 Beta adds improved HDR video handling for 8-bit formats, better audio/video synchronization when playback speed changes, and fixes for the vertical tabs sidebar. It also adds CSS support for the @supports at-rule function and the "chain" value for the CSS overscroll-behavior property, alongside Nova UI design work and the return of compact mode. ### Source excerpt The Firefox release train keeps on rolling. With Firefox 156 released, Firefox 157 is now in beta ahead of the planned release coming up at the end of September... ## Firefox 156 Available With Its Built-In PDF Viewer Starting Up To 45% Faster DevFeed: [Firefox 156 Available With Its Built-In PDF Viewer Starting Up To 45% Faster]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-14T15:09:09Z Content type: news Language: en Sources: [Phoronix]() Topics: [Firefox](), [pdf](), [Mozilla](), [Linux](), [Nvidia]() Tags: [cpu](), [desktop-linux](), [firefox](), [history](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [memory](), [mozilla](), [nvidia](), [open-source-graphics](), [pdf](), [performance](), [phoronix](), [phoronix-test-suite](), [release](), [ubuntu-benchmarks](), [ubuntu-hardware](), [update](), [vulkan]() ### AI overview Firefox 156 is available with a built-in PDF viewer that starts up up to 45% faster. The release also improves memory and CPU usage when displaying large scaled-down JPEG images and includes several fixes. Vulkan Video decoding for newer NVIDIA GPUs remains limited to nightly builds. ### Source excerpt Mozilla today published their Firefox 156.0 release binaries ahead of the official Tuesday announcement... ## Firefox Is Getting Its Biggest Redesign in Years. Then Mozilla Got Cold Feet. DevFeed: [Firefox Is Getting Its Biggest Redesign in Years. Then Mozilla Got Cold Feet.]() Original publisher: [Read original article]() Author: Alex Harper Published: 2026-09-09T18:24:32Z Content type: opinion Language: en Sources: [Web Designer Depot]() Topics: [Firefox]() Tags: [browser](), [browser-design](), [browser-redesign](), [browser-ui](), [browser-ux](), [design](), [design-controversy](), [design-trends](), [features](), [firefox](), [firefox-features](), [firefox-interface](), [firefox-redesign](), [firefox-update](), [future-of-browsers](), [interface-design](), [mobile](), [mozilla](), [mozilla-firefox](), [open-source](), [product-design](), [themes](), [tokens](), [ui-design](), [ux](), [ux-design](), [visual-ui-design](), [web-browsers](), [web-design]() ### AI overview Firefox's Project Nova redesign is being softened after user feedback. Mozilla restored Compact Mode and reduced some of the boldest interface changes, while retaining refreshed components, icons, colors, themes, and rounded elements. The article argues that responsive iteration and user control are more valuable than following fashionable design trends. ### Source excerpt Firefox is getting its biggest makeover in years--but Mozilla has already backed away from some of its boldest ideas. Project Nova reveals what happens when modern design trends, millions of opinionated users, and the internet's unstoppable obsession with rounded corners collide. ## Intent to Ship: JPEG XL DevFeed: [Intent to Ship: JPEG XL]() Original publisher: [Read original article]() Author: Jake Archibald Published: 2026-08-24T15:32:15Z Content type: article Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [Firefox](), [Web](), [Rust](), [Firefox Nightly](), [Google](), [Chrome](), [C++]() Tags: [blog](), [browser](), [browsers](), [c-plus-plus](), [developer](), [features](), [firefox](), [firefox-nightly](), [google](), [hacks](), [interop](), [mozilla](), [uncategorized](), [web]() ### AI overview Mozilla announces its intent to ship JPEG XL in Firefox, using Google Research's Rust-based jxl-rs decoder to provide secure, performant support. The article highlights progressive rendering and compares JPEG XL with AVIF for different image-compression use cases. ### Source excerpt It isn't often that new image formats land in browsers. In the early 2000s we had JPEG, GIF, and PNG. The 2010s gave us WebP, which was a modest step up from JPEG. But the 2020s have given us two new image formats that are a big step up from previous formats: AVIF and JPEG [...] The post Intent to Ship: JPEG XL appeared first on Mozilla Hacks - the Web developer blog. ## PACT: Anonymous Credentials for the Web DevFeed: [PACT: Anonymous Credentials for the Web]() Original publisher: [Read original article]() Author: Dennis Jackson Published: 2026-06-23T15:29:52Z Content type: article Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [Web](), [browsers](), [AI Bots](), [Tooling]() Tags: [agent](), [blog](), [bots](), [browsers](), [developer](), [firefox](), [mozilla](), [privacy](), [security](), [technical](), [web]() ### AI overview This technical companion examines PACT, a proposed approach to anonymous credentials for the web. It describes how anti-abuse systems, privacy protections, generative AI, VPN use, and browser-based AI agents create tension between preventing abuse and preserving privacy and user choice. ### Source excerpt This is the technical companion to our update on Distilled, "Keeping the web open and private in the bot era." Here we take a deeper look at the problem space, the design we're proposing, and the problems still left to solve. Bots (and privacy-preserving browsers) not welcome Browse a news site in a private window. Shop [...] The post PACT: Anonymous Credentials for the Web appeared first on Mozilla Hacks - the Web developer blog. ## Security Week 2622: эффективность Claude Mythos по версии Cloudflare DevFeed: [Security Week 2622: эффективность Claude Mythos по версии Cloudflare]() Original publisher: [Read original article]() Author: Kaspersky\_Lab ("Лаборатория Касперского") Published: 2026-05-25T16:39:09Z Content type: article Language: ru Sources: ["Лаборатория Касперского" RU]() Topics: [Claude](), [Security](), [Cloudflare](), [anthropic](), [Firefox](), [Mozilla]() Tags: [anthropic](), [claude](), [claude-mythos](), [cloudflare](), [firefox](), [mozilla](), [mythos](), [project-glasswing](), [security](), [tag-9fe8963de219]() ### AI overview The article discusses Cloudflare's account of testing Anthropic's Claude Mythos for automated vulnerability research. It reports that the model found vulnerabilities in Cloudflare's codebase and could construct exploit chains to provide evidence of a bug's danger. The article also describes Cloudflare's supporting workflow, which narrows the analysis scope and runs multiple investigations in parallel to improve the balance between actionable findings and noise. ### Source excerpt На прошлой неделе компания Cloudflare поделилась своими впечатлениями о работе ИИ-модели Claude Mythos. Эта модель разработана компанией Anthropic, и в данный момент доступ к ней предоставляется "по приглашениям" в рамках проекта Project Glasswing. Одной из причин такого закрытого процесса тестирования является достаточно высокая эффективность ИИ-ассистента при поиске и обнаружении уязвимостей. Независимые подтверждения этой эффективности уже были опубликованы ранее, например от команды разработчиков браузера Mozilla Firefox. В отличие от отчета Mozilla, Cloudflare в своей публикации не приводит примеры обнаруженных уязвимостей. Говорится только о том, что Mythos тестировалась на кодовой базе Cloudflare и что уязвимости действительно были обнаружены. Зато Cloudflare не ограничивается простым тезисом о том, что для эффективной работы ИИ-модели требуется разработка соответствующей обвязки, а подробно описывает, на какие этапы внутри этой обвязки разбивается автоматизированный поиск уязвимостей. Читать далее ## Behind the Scenes Hardening Firefox with Claude Mythos Preview DevFeed: [Behind the Scenes Hardening Firefox with Claude Mythos Preview]() Original publisher: [Read original article]() Author: Brian Grinstead Published: 2026-05-07T16:01:21Z Content type: article Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [Firefox](), [Security](), [Claude](), [AI Models](), [Mozilla]() Tags: [ai-models](), [claude](), [developer](), [featured-article](), [firefox](), [mozilla](), [open-source](), [security]() ### AI overview Mozilla describes how Firefox teams used Claude Mythos Preview and other AI models to identify and fix latent security bugs, improve bug-finding workflows, and investigate sandbox escapes. ### Source excerpt Two weeks ago we announced that we had identified and fixed an unprecedented number of latent security bugs in Firefox with the help of Claude Mythos Preview and other AI models. In this post, we'll go into more detail about how we approached this work, what we found, and advice for other projects on making [...] The post Behind the Scenes Hardening Firefox with Claude Mythos Preview appeared first on Mozilla Hacks - the Web developer blog. ## Security Week 2616: взлом сайта CPU-Z и HWMonitor DevFeed: [Security Week 2616: взлом сайта CPU-Z и HWMonitor]() Original publisher: [Read original article]() Author: Kaspersky\_Lab ("Лаборатория Касперского") Published: 2026-04-13T18:39:55Z Content type: news Language: ru Sources: ["Лаборатория Касперского" RU]() Topics: [Security](), [cpu](), [anthropic](), [Claude](), [FFmpeg (Fast Forward Moving Picture Experts Group)](), [Firefox](), [Nvidia](), [Unix]() Tags: [amazon](), [anthropic](), [claude](), [claude-mythos](), [cpu](), [cpu-z](), [firefox](), [hwmonitor](), [mozilla](), [mozilla-firefox](), [mythos](), [nvidia](), [security](), [tag-9fe8963de219](), [unix]() ### AI overview This Russian-language Security Week roundup reports that cpuid.com was compromised for about 18 hours, causing malicious downloads of CPU-Z, HWMonitor, and PerfMonitor installers that included the CRYPTBASE.DLL malware component and ultimately delivered STX RAT. It also discusses Anthropic's Claude Mythos model and reported vulnerability discovery and exploitation capabilities, including a 72% exploitation rate for Mozilla Firefox vulnerabilities. ### Source excerpt 9 апреля был взломан веб-сайт cpuid.com, с которого распространяются популярные утилиты CPU-Z, HWMonitor и PerfMonitor. В течение примерно 18 часов ссылки на загрузку этих утилит были подменены на вредоносные. Специалисты "Лаборатории Касперского" провели анализ данной кибератаки, в ходе которой на компьютеры жертв устанавливалось ПО для кражи персональных данных. Модифицированные инсталляторы содержали оригинальный легитимный дистрибутив соответствующей утилиты и вредоносную библиотеку CRYPTBASE.DLL. Она отвечает за подключение к командному серверу и запуск следующей стадии атаки. Интересным моментом является тот факт, что организаторы атаки повторно использовали командный сервер, который ранее был замечен в совсем другой атаке: в марте он был задействован при распространении поддельной версии популярного FTP-клиента FileZilla. Читать далее ## Wasmtime's April 9, 2026 Security Advisories DevFeed: [Wasmtime's April 9, 2026 Security Advisories]() Original publisher: [Read original article]() Author: The Wasmtime Project Maintainers Published: 2026-04-09T00:00:00Z Content type: news Language: en Sources: [Bytecode Alliance]() Topics: [Security](), [Vulnerabilities](), [releases](), [Open Source](), [Rust](), [WebAssembly](), [Machine Learning, Security Attacks](), [Mozilla]() Tags: [2026](), [attacks](), [audit](), [fuzzing](), [llm](), [mozilla](), [open-source](), [release](), [releases](), [rust](), [security](), [vulnerabilities](), [webassembly]() ### AI overview The Wasmtime team released versions 43.0.1, 42.0.2, 36.0.7, and 24.0.7 with fixes for 12 security advisories, including two rated Critical. The team says 11 advisories were found using new LLM-based tools and recommends that users upgrade. ### Source excerpt A new world for security-critical projects ## Navigating Regional Network Blocks DevFeed: [Navigating Regional Network Blocks]() Original publisher: [Read original article]() Author: Sara Read Published: 2026-03-26T07:00:00Z Content type: article Language: en Sources: [Supabase Blog]() Topics: [Supabase](), [Network](), [hosting](), [browsers](), [Pull Request](), [Security](), [Mozilla]() Tags: [applications](), [browsers](), [hosting](), [internet](), [mozilla](), [network](), [platforms](), [pull-request](), [security]() ### AI overview Supabase explains how regional ISP and government-directed domain blocks affect multi-tenant infrastructure platforms. Drawing on three incidents, the article discusses causes, responses, and preventive measures, including adding hosting domains to the Public Suffix List to establish tenant boundaries in browsers. ### Source excerpt A look at recent ISP and government-directed blocks of Supabase domains in three regions--what triggered them, how we worked with authorities and customers to restore access, and what multi-tenant platforms can do to prepare. ## Firefox Developer Edition and Beta: Try out Mozilla's .rpm package! DevFeed: [Firefox Developer Edition and Beta: Try out Mozilla's .rpm package!]() Original publisher: [Read original article]() Author: Bastien Orivel Published: 2026-03-25T16:17:11Z Content type: release Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [App]() Tags: [developer](), [featured-article](), [firefox](), [linux](), [mozilla](), [performance](), [release](), [security](), [testing](), [updates]() ### AI overview Mozilla announces Firefox Beta RPM packages for RPM-based Linux distributions. The repository supports package-manager installation and updates, with performance, security, and integration improvements. ### Source excerpt In January, we introduced our Nightly package for RPM-based Linux distributions. Today, we are thrilled to announce it is now available for Firefox Beta! Firefox Beta is great for testing your sites in a version of Firefox that will reach regular users in the coming weeks. If you find any issues, please file them on [...] The post Firefox Developer Edition and Beta: Try out Mozilla's .rpm package! appeared first on Mozilla Hacks - the Web developer blog. ## Launching Interop 2026 DevFeed: [Launching Interop 2026]() Original publisher: [Read original article]() Author: Jake Archibald Published: 2026-02-12T17:07:24Z Content type: article Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [Web](), [Web platform](), [web-standards](), [browsers](), [Test coverage](), [dashboards](), [WebRTC](), [view transitions](), [CSS]() Tags: [apple](), [browser](), [css](), [featured-article](), [firefox](), [google](), [interop](), [microsoft](), [mozilla](), [uncategorized](), [view-transitions](), [web](), [web-developers](), [web-platform](), [webrtc]() ### AI overview Mozilla's Interop Project is launching Interop 2026, continuing its cross-browser effort to improve web compatibility through shared priorities and Web Platform Tests. The article reviews Interop 2025's progress, including higher overall scores, broader cross-browser support for major web platform features, and improved reliability for existing features such as WebRTC, CSS Flexbox, and CSS Grid. ### Source excerpt The Interop Project is a cross-browser initiative to improve web compatibility in areas that offer the most benefit to both users and developers. The group, including Apple, Google, Igalia, Microsoft, and Mozilla, takes proposals of features that are well defined in a sufficiently stable web standard, and have good test suite coverage. Then, we come [...] The post Launching Interop 2026 appeared first on Mozilla Hacks - the Web developer blog. ## December in Servo: multiple windows, proxy support, better caching, and more! DevFeed: [December in Servo: multiple windows, proxy support, better caching, and more!]() Original publisher: [Read original article]() Author: The Servo Project Developers Published: 2026-01-23T00:00:00Z Content type: release Language: en Sources: [Servo Blog]() Topics: [servo engine](), [modern web development](), [Web Development](), [Developer Tools]() Tags: [api](), [bugs](), [css](), [debug](), [diagnostics](), [embedding](), [events](), [firefox](), [http](), [macos](), [meta](), [mozilla](), [network-security](), [rust](), [security](), [servo](), [servo-engine](), [servo-rendering-engine](), [streams](), [tls](), [web](), [web-browser](), [web-browser-engine](), [web-engine](), [web-platform](), [web-rendering-engine](), [windows]() ### AI overview Servo 0.0.4 and December nightly builds add multiple-window support, HTTP proxy configuration, web-platform compatibility updates, expanded SubtleCrypto support, and developer-tool improvements. ### Source excerpt Servo 0.0.4 and our December nightly builds now support multiple windows (@mrobinson, @mukilan, #40927, #41235, #41144)! This builds on features that landed in Servo's embedding API last month. We've also landed support for several web platform features, both old and new: 'contrast-color()' in CSS color values (@webbeef, #41542) partial support for (@simonwuelker, #41376) partial support for encoding sniffing (@simonwuelker, #41435) 'background' and 'bgcolor' attributes on , , , , ,
, (@simonwuelker, #41272) tee() on readable byte streams (@Taym95, #35991) Note: due to a known issue, servoshell on macOS may not be able to directly open new windows, depending on your system settings. For better compatibility with older web content, we now support vendor-prefixed CSS properties like '-moz-transform' (@mrobinson, #41350), as well as window.clientInformation (@Taym95, #41111). We've continued shipping the SubtleCrypto API, with full support for ChaCha20-Poly1305, RSA-OAEP, RSA-PSS, and RSASSA-PKCS1-v1_5 (see below), plus importKey() for ML-KEM (@kkoyung, #41585) and several other improvements (@kkoyung, @PaulTreitel, @danilopedraza, #41180, #41395, #41428, #41442, #41472, #41544, #41563, #41587, #41039, #41292): Algorithm ChaCha20-Poly1305 (@kkoyung, #40978, #41003, #41030) RSA-OAEP (@kkoyung, @TimvdLippe, @jdm, #41225, #41217, #41240, #41316) RSA-PSS (@kkoyung, @jdm, #41157, #41225, #41240, #41287) RSASSA-PKCS1-v1_5 (@kkoyung, @jdm, #41172, #41225, #41240, #41267) When using servoshell on Windows, you can now see --help and log output, as long as servoshell was started in a console (@jschwe, #40961). Servo diagnostics options are now accessible in servoshell via the SERVO_DIAGNOSTICS environment variable (@atbrakhi, #41013), in addition to the usual -Z / --debug= arguments. Servo's devtools now partially support the Network > Security tab (@jiang1997, #40567), allowing you to inspect some of the TLS details of you ## Celebrating 20 years of MDN DevFeed: [Celebrating 20 years of MDN]() Original publisher: [Read original article]() Author: joe-walker Published: 2025-07-23T00:00:00Z Content type: article Language: en Sources: [MDN Blog]() Topics: [Interop2027]() Tags: [collaboration](), [community](), [contributors](), [developers](), [docs](), [documentation](), [ecosystem](), [firefox](), [github](), [mozilla](), [open](), [platform](), [web](), [web-developers](), [web-platform](), [web-standards]() ### AI overview MDN marks its 20th anniversary, reflecting on its evolution from a community wiki into a broad resource for web developers and web-platform documentation. The article thanks its contributors and celebrates collaboration across the open web. ### Source excerpt MDN turns 20! Let's look at how we started, how MDN became the most trusted resource for web developers, the impact it's had on the open web, and yes, there's cake, too. ## Improving Firefox Stability in the Enterprise by Reducing DLL Injection DevFeed: [Improving Firefox Stability in the Enterprise by Reducing DLL Injection]() Original publisher: [Read original article]() Author: Haik Aftandilian Published: 2025-03-25T18:31:16Z Content type: article Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [Firefox](), [data loss prevention](), [Security](), [Windows](), [Mozilla]() Tags: [blog](), [data-loss-prevention](), [enterprise](), [feature](), [firefox](), [mozilla](), [security](), [web-browser](), [windows]() ### AI overview Firefox 138 will provide an alternative to DLL injection for enterprise Data Loss Prevention deployments. The article explains how third-party DLLs injected into Firefox can cause incompatibilities, crashes, security bypasses, and other unpredictable behavior, especially as the browser changes frequently. ### Source excerpt Beginning in version 138, Firefox will offer an alternative to DLL injection for Data Loss Prevention (DLP) deployments in enterprise environments. DLL Injection DLL injection into Firefox is a topic we've covered on the Hacks blog before. In 2023, we blogged about the Firefox capability to let users block third-party DLLs from being loaded. We [...] The post Improving Firefox Stability in the Enterprise by Reducing DLL Injection appeared first on Mozilla Hacks - the Web developer blog. ## Introducing Uniffi for React Native: Rust-Powered Turbo Modules DevFeed: [Introducing Uniffi for React Native: Rust-Powered Turbo Modules]() Original publisher: [Read original article]() Author: Mark Mayo Published: 2024-12-04T19:38:01Z Content type: article Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [React Native](), [Rust](), [cross-platform](), [Mozilla](), [Open Source](), [JavaScript](), [Process]() Tags: [c-plus-plus](), [cross-platform](), [developer-tools](), [featured-article](), [firefox](), [javascript](), [memory-safety](), [mozilla](), [open-source](), [performance](), [react](), [react-native](), [rust]() ### AI overview Mozilla and Filament introduce Uniffi for React Native, an open-source tool for building React Native Turbo Modules in Rust. It generates bindings that let developers use Rust for shared core logic across iOS and Android, helping address JavaScript-thread performance limits while avoiding duplicated platform code or more difficult C++ integration. ### Source excerpt Mozilla and Filament have introduced Uniffi for React Native, a tool that allows developers to leverage the safety and performance benefits of Rust in cross-platform React Native apps. The post Introducing Uniffi for React Native: Rust-Powered Turbo Modules appeared first on Mozilla Hacks - the Web developer blog. ## Announcing Official Puppeteer Support for Firefox DevFeed: [Announcing Official Puppeteer Support for Firefox]() Original publisher: [Read original article]() Author: James Graham Published: 2024-08-07T15:44:40Z Content type: article Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [Puppeteer](), [Firefox](), [Automation](), [webDriver](), [Chrome](), [Web]() Tags: [automation](), [blog](), [browser](), [chrome](), [featured-article](), [firefox](), [mozilla](), [testing](), [web](), [web-developers](), [webdriver]() ### AI overview Puppeteer version 23 adds first-class Firefox support, enabling browser automation and end-to-end testing against both Firefox and Chrome. The implementation uses the cross-browser WebDriver BiDi protocol, with examples including console log capture and device emulation. ### Source excerpt We're pleased to announce that, as of version 23, the Puppeteer browser automation library now has first-class support for Firefox. This means that it's now easy to write automation and perform end-to-end testing using Puppeteer, and run against both Chrome and Firefox. The post Announcing Official Puppeteer Support for Firefox appeared first on Mozilla Hacks - the Web developer blog. ## Introducing the MDN HTTP Observatory DevFeed: [Introducing the MDN HTTP Observatory]() Original publisher: [Read original article]() Author: hermina-condei Published: 2024-07-02T00:00:00Z Content type: article Language: en Sources: [MDN Blog]() Topics: [Security](), [HTTP](), [Web](), [Documentation](), [migration](), [Testing](), [Mozilla](), [Architecture & Design]() Tags: [audits](), [best-practices](), [blog](), [blog-post](), [developer](), [documentation](), [http](), [migration](), [mozilla](), [security](), [web]() ### AI overview Mozilla announces that the HTTP Observatory has moved to MDN. The tool scans websites for security best-practice compliance, especially correct HTTP header usage, and provides scores, grades, actionable feedback, and documentation to help developers improve website security. ### Source excerpt First released in 2016, the HTTP Observatory became popular in the web community with a combination of helpful security audits and educational material. Fast forward to 2024, and we are delighted to announce that Observatory's new home is MDN. Read on to find out more about what this entails, and give the HTTP Observatory a warm welcome! ## Snapshots for IPC Fuzzing DevFeed: [Snapshots for IPC Fuzzing]() Original publisher: [Read original article]() Author: Christian Holler Published: 2024-06-27T16:18:49Z Content type: article Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [Fuzzing/Fuzz testing](), [Firefox](), [out-of-process](), [Security](), [Vulnerabilities](), [Testing]() Tags: [featured-article](), [firefox](), [fuzzing](), [ipc](), [memory-safety](), [mozilla](), [open-source](), [processes](), [security](), [snapshots](), [ssecurity](), [testing](), [vulnerabilities]() ### AI overview This article explains how Firefox uses process separation and IPC to isolate lower-privilege content processes from the privileged parent process. It introduces snapshot fuzzing, a method for rewinding application state to make testing critical IPC interfaces more practical by avoiding costly browser restarts and reducing iteration latency. ### Source excerpt Process separation remains one of the most important parts of the Firefox security model and securing our IPC (Inter-Process Communication) interfaces is crucial to keep privileges in the different processes separated. We take a more detailed look at our newest tool for finding vulnerabilities in these interfaces - snapshot fuzzing. The post Snapshots for IPC Fuzzing appeared first on Mozilla Hacks - the Web developer blog. ## Sponsoring sqlite-vec to enable more powerful Local AI applications DevFeed: [Sponsoring sqlite-vec to enable more powerful Local AI applications]() Original publisher: [Read original article]() Author: Stephen Hood Published: 2024-06-25T15:25:58Z Content type: news Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [Local AI]() Tags: [ai](), [artificial-intelligence](), [discord](), [featured-article](), [firefox](), [llamafile](), [local-ai](), [mozilla](), [on-device](), [open-source](), [rag](), [sqlite](), [vector]() ### AI overview Mozilla is sponsoring sqlite-vec through its Builders program to bring vector search to SQLite for local AI applications. The project is presented as enabling on-device uses such as retrieval-augmented generation and semantic search. ### Source excerpt Today we're proud to announce the next Mozilla Builders project: sqlite-vec. Led by independent developer Alex Garcia, this project brings vector search functionality to the beloved SQLite embedded database. Alex has been working on this problem for a while, and we think his latest approach will have a great impact by providing application developers with a powerful new tool for building Local AI applications. The post Sponsoring sqlite-vec to enable more powerful Local AI applications appeared first on Mozilla Hacks - the Web developer blog. ## onwebkitplaybacktargetavailabilitychanged?! New exotic events in the XSS cheat sheet DevFeed: [onwebkitplaybacktargetavailabilitychanged?! New exotic events in the XSS cheat sheet]() Original publisher: [Read original article]() Author: Gareth Heyes Published: 2024-06-11T14:58:29Z Content type: article Language: en Sources: [PortSwigger Research]() Topics: [Cheat sheet](), [Security](), [Web](), [Mozilla](), [marquee]() Tags: [audio](), [cheat-sheet](), [code](), [community](), [contribute](), [firefox](), [marquee](), [mozilla](), [security](), [tool](), [update](), [video](), [web]() ### AI overview An update to PortSwigger's XSS cheat sheet adds and documents exotic browser event vectors, including Safari audio and video behavior, pointer interaction, autofocus usage, and WebKit trackpad events. The article also credits community contributions and Mozilla's help removing obsolete marquee events from Firefox. ### Source excerpt The power of our XSS cheat sheet is we get fantastic contributions from the web security community and this update is no exception. We had valuable contributions from Mozilla to remove events that no [Next page]()