# Firefox Firefox is a free, open-source web browser developed by Mozilla Corporation. It uses the Gecko rendering engine and is available for desktop and mobile platforms. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Inertia DevTools Now Available for Firefox DevFeed: [Inertia DevTools Now Available for Firefox]() Original publisher: [Read original article]() Author: Paul Redmond Published: 2026-09-17T02:28:55Z Content type: release Language: en Sources: [Laravel]() Topics: [Firefox](), [Browser Extension](), [developer tooling](), [Chrome](), [vs-code](), [phpstorm]() Tags: [chrome-extension](), [devtools](), [editor](), [extension](), [features](), [firefox](), [news](), [panel](), [phpstorm](), [vs-code]() ### AI overview Inertia DevTools is now available as an official Firefox extension with feature parity with the Chrome extension. It records Inertia visits and exposes props, request and response details, routes, controller actions, and page state in a Firefox DevTools panel. Sensitive fields are redacted, and recorded data remains on the local machine. ### Source excerpt Inertia DevTools, the panel for inspecting Inertia.js visits and props, is now on Firefox with the same features as the Chrome extension. The post Inertia DevTools Now Available for Firefox appeared first on Laravel News. Join the Laravel Newsletter to get Laravel articles like this directly in your inbox. ## Mesa 26.2.3 Released With AMD GFX1171 Support, Other Fixes DevFeed: [Mesa 26.2.3 Released With AMD GFX1171 Support, Other Fixes]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-16T21:18:50Z Content type: news Language: en Sources: [Phoronix]() Topics: [GPU](), [patches](), [Adreno](), [intel](), [Qualcomm](), [Firefox](), [Memory Leaks](), [Flight]() Tags: [adreno](), [amd](), [browser](), [bug](), [bug-fixes](), [desktop-linux](), [firefox](), [gpu](), [intel](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [memory-leak](), [open-source-graphics](), [patches](), [phoronix](), [phoronix-test-suite](), [qualcomm](), [release](), [stable](), [ubuntu-benchmarks](), [ubuntu-hardware](), [vulkan]() ### AI overview Mesa 26.2.3 is a stable bi-weekly point release containing backported bug fixes for RadeonSI, RADV, Freedreno, Turnip, Intel ANV, Asahi, NVK, and other drivers. It also adds AMD GFX1171 support. ### Source excerpt Mesa 26.2.3 is out today as the newest stable point release in this quarter's Mesa 26.2 series... ## Firefox 157 Beta Released With Latest Enhancements DevFeed: [Firefox 157 Beta Released With Latest Enhancements]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-15T12:31:03Z Content type: release Language: en Sources: [Phoronix]() Topics: [Firefox](), [Mozilla](), [CSS](), [Nova](), [Playback](), [HTML](), [ui]() Tags: [audio](), [css](), [desktop-linux](), [firefox](), [html](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [mozilla](), [nova](), [open-source-graphics](), [phoronix](), [phoronix-test-suite](), [playback](), [release](), [ubuntu-benchmarks](), [ubuntu-hardware](), [ui]() ### AI overview Firefox 157 Beta adds improved HDR video handling for 8-bit formats, better audio/video synchronization when playback speed changes, and fixes for the vertical tabs sidebar. It also adds CSS support for the @supports at-rule function and the "chain" value for the CSS overscroll-behavior property, alongside Nova UI design work and the return of compact mode. ### Source excerpt The Firefox release train keeps on rolling. With Firefox 156 released, Firefox 157 is now in beta ahead of the planned release coming up at the end of September... ## Tools DevFeed: [Tools]() Original publisher: [Read original article]() Author: Kaushik Gopal Published: 2026-09-15T04:00:36.743345Z Content type: article Language: en Sources: [Kaushik Gopal's Site]() Topics: [Programming](), [Cloudflare](), [Terminal](), [Vim](), [Hugo](), [Firefox](), [macOS](), [Obsidian](), [Font]() Tags: [cloudflare](), [firefox](), [hugo](), [mac](), [macos](), [programming](), [programming-font](), [terminal](), [tools](), [vim]() ### AI overview A personal tools page listing services, programming tools, macOS applications, audio equipment, desk items, and physical products. It mentions Buttondown, a customized Hugo site deployed on Cloudflare Pages, Ghostty, tmux, Vim, Zed, Obsidian, Raycast, Firefox, CleanShot, and Logic Pro. ### Source excerpt Bits ## Services ### Newsletter via Buttondown Statically generate site with Henry (highly customized Hugo theme) Deployed on Cloudflare Pages Programming ### Berkeley Mono is my programming font of choice Ghostty for terminal stuff (along with tmux) Within the terminal I'm almost entirely using Vim. Zed as my regular text editor MacOS ### Obsidian for notes & todos Raycast is my launcher Firefox for browsing CleanShot for screenshots on my mac Logic Pro for editing AI Stuff ### With AI evolving so fast, my tag ai-model-choice is a better place to track what I'm using. Atoms ## Desk ### Nordik Leather Desk Mat LEUCHTTURM1917 Soft cover journal dotted Uniball Deluxe 0.5mm Micro pens Audio ### Earthworks Ethos - 400 microphone USBPre 21 audio interface AirPods Max (yes for podcasting!) Physical ### I drive a Tesla Model Y (and eagerly waiting to move to an R3) These are no longer sold but are built like a tank. I'd probably pick the Motu 2 if my USBPre 2 ever fails ↩︎ ## Firefox 156 Available With Its Built-In PDF Viewer Starting Up To 45% Faster DevFeed: [Firefox 156 Available With Its Built-In PDF Viewer Starting Up To 45% Faster]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-14T15:09:09Z Content type: news Language: en Sources: [Phoronix]() Topics: [Firefox](), [pdf](), [Mozilla](), [Linux](), [Nvidia]() Tags: [cpu](), [desktop-linux](), [firefox](), [history](), [linux](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [memory](), [mozilla](), [nvidia](), [open-source-graphics](), [pdf](), [performance](), [phoronix](), [phoronix-test-suite](), [release](), [ubuntu-benchmarks](), [ubuntu-hardware](), [update](), [vulkan]() ### AI overview Firefox 156 is available with a built-in PDF viewer that starts up up to 45% faster. The release also improves memory and CPU usage when displaying large scaled-down JPEG images and includes several fixes. Vulkan Video decoding for newer NVIDIA GPUs remains limited to nightly builds. ### Source excerpt Mozilla today published their Firefox 156.0 release binaries ahead of the official Tuesday announcement... ## Security updates for Monday DevFeed: [Security updates for Monday]() Original publisher: [Read original article]() Author: jzb Published: 2026-09-14T13:18:14Z Content type: news Language: en Sources: [LWN.net]() Topics: [Security](), [Debian](), [Fedora](), [Firefox](), [Git](), [nginx](), [Python](), [cURL](), [Elixir](), [F#](), [Redis](), [Rust]() Tags: [curl](), [debian](), [elixir](), [firefox](), [git](), [nginx](), [python](), [redis](), [rust](), [security](), [updates]() ### AI overview Security updates were issued across AlmaLinux, Debian, Fedora, Gentoo, Mageia, Oracle, and SUSE. The affected software includes operating-system components, browsers, developer tools, programming-language packages, servers, libraries, and cloud-related utilities. ### Source excerpt Security updates have been issued by AlmaLinux (389-ds-base, apr-util, coreutils, freerdp, git-lfs, glib2, gstreamer1-plugins-base, kernel, libkcapi, nginx, nodejs:22, nodejs:24, osbuild-composer, perl-YAML-Syck, postgresql16-postgis, ruby, ruby4.0, ruby:3.3, and vim), Debian (jbig2dec, kamailio, nginx, spip, and xorg-server), Fedora (baresip, bind, bluez, bubblewrap, chirp, chromium, cockpit, composer, corosync, darktable, dokuwiki, elixir, exiv2, expat, firefox, freerdp, freerdp2, gdk-pixbuf2, gegl04, golang-x-perf, grpcurl, kernel, kernel-headers, libevent, libmongocrypt, libpcap, libre, libsoup3, memcached, mingw-expat, mingw-openexr, mongo-c-driver, mrtg, nagios-plugins, nsd, nss, openssl, openvpn, PackageKit, pdns-recursor, perl-Net-OAuth, perl-XML-Bare, php-pecl-mongodb2, python-asteval, python-pip, rclone, rest, rust-hickory-net, rust-hickory-proto, rust-hickory-resolver, rust-ppmd-rust, rust-webbrowser, srt, syncthing, tar, tkimg, and valkey), Gentoo (Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi and Ruby), Mageia (bind, ffmpeg, glibc, java-17-openjdk, java-21-openjdk, librabbitmq, perl-Catalyst-Plugin-Static-Simple, perl-Imager, tor, and xz), Oracle (389-ds:1.4, ansible-core, apr-util, coreutils, freerdp, git-lfs, glib2, gstreamer1-plugins-base, gzip, httpd:2.4, image-builder, java-21-openjdk, kernel, mrtg, nginx, osbuild-composer, perl-DBI, postgresql16-postgis, python-lxml, python3.12-lxml, redis:6, and vim), SUSE (389-ds, ansible-core, ansible-creator, azure-storage-azcopy, cargo-audit, chromedriver, chromium, clamav, containerized-data-importer1.65, containerized-data-importer1.66, curl, dracut, ffmpeg-4, google-guest-agent, google-osconfig-agent, helm, java-1_8_0-ibm, jupyter-nbconvert, kernel, libpng16, libusb-1_0, libvirt, multipath-tools, NetworkManager, opensc, openssl-3, perl-Authen-SASL, perl-HTML-FormHandler, perl-Mojolicious, perl-Protocol-HTTP2, python-jwcrypto, python-sqlparse, python-tornado6, python313-geopy, python313-modelscope ## Firefox Is Getting Its Biggest Redesign in Years. Then Mozilla Got Cold Feet. DevFeed: [Firefox Is Getting Its Biggest Redesign in Years. Then Mozilla Got Cold Feet.]() Original publisher: [Read original article]() Author: Alex Harper Published: 2026-09-09T18:24:32Z Content type: opinion Language: en Sources: [Web Designer Depot]() Topics: [Firefox]() Tags: [browser](), [browser-design](), [browser-redesign](), [browser-ui](), [browser-ux](), [design](), [design-controversy](), [design-trends](), [features](), [firefox](), [firefox-features](), [firefox-interface](), [firefox-redesign](), [firefox-update](), [future-of-browsers](), [interface-design](), [mobile](), [mozilla](), [mozilla-firefox](), [open-source](), [product-design](), [themes](), [tokens](), [ui-design](), [ux](), [ux-design](), [visual-ui-design](), [web-browsers](), [web-design]() ### AI overview Firefox's Project Nova redesign is being softened after user feedback. Mozilla restored Compact Mode and reduced some of the boldest interface changes, while retaining refreshed components, icons, colors, themes, and rounded elements. The article argues that responsive iteration and user control are more valuable than following fashionable design trends. ### Source excerpt Firefox is getting its biggest makeover in years--but Mozilla has already backed away from some of its boldest ideas. Project Nova reveals what happens when modern design trends, millions of opinionated users, and the internet's unstoppable obsession with rounded corners collide. ## GeForce NOW Gives Gamers More Ways to Play at Gamescom 2026 DevFeed: [GeForce NOW Gives Gamers More Ways to Play at Gamescom 2026]() Original publisher: [Read original article]() Author: GeForce NOW Community Published: 2026-08-27T13:00:33Z Content type: news Language: en Sources: [NVIDIA Blog]() Topics: [Cloud](), [Nvidia](), [Streaming](), [Firefox](), [amazon](), [Hardware](), [macOS](), [Windows]() Tags: [announcements](), [cloud](), [cloud-gaming](), [firefox](), [gamescom](), [gaming](), [geforce-now](), [hardware](), [launch](), [macos](), [nvidia](), [pc](), [streaming](), [windows]() ### AI overview NVIDIA's Gamescom 2026 announcements expand GeForce NOW with new cloud-gaming capabilities, device and platform support, DLSS 4.5 controls, GOG single sign-on, Firefox support, and additional games. ### Source excerpt NVIDIA's Gamescom announcements are revealing what's next for GeForce NOW, with new ways to play, more supported devices and platforms, and even more big PC games headed to the cloud. New NVIDIA DLSS 4.5 technology controls give members more ways to fine-tune gameplay, while expanded support for new Steam devices, GOG single sign-on, Firefox browser [...] ## Intent to Ship: JPEG XL DevFeed: [Intent to Ship: JPEG XL]() Original publisher: [Read original article]() Author: Jake Archibald Published: 2026-08-24T15:32:15Z Content type: article Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [Firefox](), [Web](), [Rust](), [Firefox Nightly](), [Google](), [Chrome](), [C++]() Tags: [blog](), [browser](), [browsers](), [c-plus-plus](), [developer](), [features](), [firefox](), [firefox-nightly](), [google](), [hacks](), [interop](), [mozilla](), [uncategorized](), [web]() ### AI overview Mozilla announces its intent to ship JPEG XL in Firefox, using Google Research's Rust-based jxl-rs decoder to provide secure, performant support. The article highlights progressive rendering and compares JPEG XL with AVIF for different image-compression use cases. ### Source excerpt It isn't often that new image formats land in browsers. In the early 2000s we had JPEG, GIF, and PNG. The 2010s gave us WebP, which was a modest step up from JPEG. But the 2020s have given us two new image formats that are a big step up from previous formats: AVIF and JPEG [...] The post Intent to Ship: JPEG XL appeared first on Mozilla Hacks - the Web developer blog. ## Bring the Fire: Play Games on GeForce NOW With New Firefox Browser Support DevFeed: [Bring the Fire: Play Games on GeForce NOW With New Firefox Browser Support]() Original publisher: [Read original article]() Author: GeForce NOW Community Published: 2026-08-20T13:00:24Z Content type: news Language: en Sources: [NVIDIA Blog]() Topics: [Firefox](), [Cloud](), [browser](), [Edge]() Tags: [browser](), [cloud](), [cloud-gaming](), [devices](), [firefox](), [gaming](), [geforce-now](), [laptop](), [pc](), [streaming](), [updates](), [windows]() ### AI overview GeForce NOW adds Firefox support, allowing members to stream supported PC games directly from the browser without installing a dedicated app. The service also highlights 12 games entering its streaming library this week. ### Source excerpt It's a new way into the cloud. GeForce NOW welcomes Firefox support to the cloud, opening up another way to jump into high-performance PC gaming straight from the browser, starting today. Whether on a school laptop or everyday PC, it's now even easier to play supported PC games without downloading a dedicated app. Plus, discover [...] ## Engineering quality compounds DevFeed: [Engineering quality compounds]() Original publisher: [Read original article]() Author: Mike Shaver, Avery Pennarun Published: 2026-07-21T13:00:00Z Content type: news Language: en Sources: [Blog on Tailscale]() Topics: [engineering-leadership](), [Architecture & Design](), [Firefox](), [systems](), [JIT](), [Linux](), [JavaScript](), [Security](), [Shopify]() Tags: [developer](), [engineering](), [engineering-leadership](), [firefox](), [javascript](), [jit](), [linux](), [news](), [platform](), [security](), [shopify](), [systems]() ### AI overview Mike Shaver joins Tailscale as VP of Engineering, bringing experience in platform engineering, Firefox, Facebook's mobile transition, security products, systems programming, and edge infrastructure. The article frames his role around scaling engineering quality while keeping Tailscale's product reliable, useful, and understandable. ### Source excerpt Mike Shaver joins Tailscale to scale engineering quality. ## Security Week 2620: эффект от ИИ для поиска уязвимостей в Firefox DevFeed: [Security Week 2620: эффект от ИИ для поиска уязвимостей в Firefox]() Original publisher: [Read original article]() Author: Kaspersky\_Lab ("Лаборатория Касперского") Published: 2026-05-12T10:45:28Z Content type: news Language: ru Sources: ["Лаборатория Касперского" RU]() Topics: [Firefox](), [Security](), [Claude](), [anthropic]() Tags: [anthropic](), [claude](), [claude-mythos](), [firefox](), [net-11-preview-7](), [security](), [tag-9fe8963de219]() ### AI overview The article reports on Mozilla Firefox developers' detailed account of using Anthropic's Claude Mythos AI model to find browser vulnerabilities. Firefox 150 closed 271 AI-identified issues, including 180 rated sec-high, while the developers note that real-world exploitation was not investigated for each issue and that supporting infrastructure helped reduce false positives. ### Source excerpt На прошлой неделе разработчики браузера Mozilla Firefox опубликовали детальный отчет об использовании искусственного интеллекта для поиска уязвимостей (оригинальный пост, новость на Хабре). Публикации предшествовал краткий анонс в конце апреля: тогда стало известно, что в Mozilla получили доступ к ИИ-модели Claude Mythos компании Anthropic, которая пока недоступна публично всем желающим. В анонсе разработчики браузера не стеснялись в хвалебных эпитетах, предрекая скорый конец уязвимостям нулевого дня -- когда разработчик ПО обнаруживает баг, который уже эксплуатируется в реальных атаках. В новой публикации приведены конкретные примеры в виде 12 уязвимостей. Всего в релизе Firefox 150 была закрыта 271 проблема, все они были найдены с применением Claude Mythos. Если добавить уязвимости, найденные и закрытые другими методами (в том числе обнаруженные с помощью других ИИ-моделей), всего за апрель получится 423 патча, в то время как за весь предыдущий год было закрыто 353 проблемы, так или иначе влияющих на безопасность работы браузера. Из 271 уязвимости, найденной с помощью ИИ, 180 имеют рейтинг sec-high -- это внутренняя квалификация Mozilla, указывающая на высокую (но не максимальную) опасность проблемы. Такие баги могут быть эксплуатированы без дополнительных сложностей -- например, пользователя достаточно будет заманить на подготовленную страницу. Читать далее ## Behind the Scenes Hardening Firefox with Claude Mythos Preview DevFeed: [Behind the Scenes Hardening Firefox with Claude Mythos Preview]() Original publisher: [Read original article]() Author: Brian Grinstead Published: 2026-05-07T16:01:21Z Content type: article Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [Firefox](), [Security](), [Claude](), [AI Models](), [Mozilla]() Tags: [ai-models](), [claude](), [developer](), [featured-article](), [firefox](), [mozilla](), [open-source](), [security]() ### AI overview Mozilla describes how Firefox teams used Claude Mythos Preview and other AI models to identify and fix latent security bugs, improve bug-finding workflows, and investigate sandbox escapes. ### Source excerpt Two weeks ago we announced that we had identified and fixed an unprecedented number of latent security bugs in Firefox with the help of Claude Mythos Preview and other AI models. In this post, we'll go into more detail about how we approached this work, what we found, and advice for other projects on making [...] The post Behind the Scenes Hardening Firefox with Claude Mythos Preview appeared first on Mozilla Hacks - the Web developer blog. ## Squarespace & Web Standards: How We Helped Bring HTML Video & Audio Lazy Loading to Today's Browsers DevFeed: [Squarespace & Web Standards: How We Helped Bring HTML Video & Audio Lazy Loading to Today's Browsers]() Original publisher: [Read original article]() Author: Scott Jehl Published: 2026-03-30T21:00:00Z Content type: article Language: en Sources: [Squarespace](), [Squarespace Engineering Blog]() Topics: [web-standards](), [lazy loading](), [HTML](), [Web platform](), [WebKit](), [Chromium](), [Google Chrome](), [Firefox]() Tags: [browsers](), [chrome](), [chromium](), [firefox](), [html](), [lazy-loading](), [standards](), [web-standards]() ### AI overview Squarespace engineers describe how they helped add lazy loading for HTML video and audio to the HTML Standard. They contributed proposed implementations for Firefox and WebKit, worked with Chromium developers on a Google Chrome implementation, and added automated testing. ### Source excerpt At Squarespace, many of our core products are built on web standards, and our engineers are constantly pushing the boundaries of the web's capabilities. Occasionally, those boundaries reveal a limitation: an opportunity for the web's native capabilities to grow. This post is the story of how we found such an opportunity to work with the standards community to improve the web in a way that we - and everyone who uses it - can benefit. ## \[SMT\]\[Z3\] Predicting Math.random() in Firefox using Z3 SMT-solver DevFeed: [\[SMT\]\[Z3\] Predicting Math.random() in Firefox using Z3 SMT-solver]() Original publisher: [Read original article]() Published: 2026-02-01T23:00:00Z Content type: tutorial Language: en Sources: [Dennis Yurichev]() Topics: [Firefox](), [Code](), [math](), [C]() Tags: [c](), [code](), [firefox](), [math]() ### AI overview This tutorial shows how to use the Z3 SMT solver with Z3Py to recover the initial state of Firefox's Xorshift128+ pseudorandom number generator and predict Math.random() outputs. It explains why three generated real numbers are sufficient to determine the 128-bit state and demonstrates verification with C code. ### Source excerpt [SMT][Z3] Predicting Math.random() in Firefox using Z3 SMT-solver ## Firefox and uBlock Origin Compared with Chromium Browsers Under Manifest V3 DevFeed: [Firefox and uBlock Origin Compared with Chromium Browsers Under Manifest V3]() Original publisher: [Read original article]() Author: Kaushik Gopal Published: 2025-11-14T04:38:50Z Content type: opinion Language: en Sources: [Kaushik Gopal's Site]() Topics: [Firefox](), [Chromium](), [Extension](), [Edge]() Tags: [chromium](), [extension](), [firefox]() ### AI overview An opinion article arguing that Firefox with uBlock Origin provides more user-controllable blocking than Chromium-based alternatives constrained by Manifest V3. It describes Brave's native blocking patches and hosting of selected Manifest V2 extensions as workarounds. ### Source excerpt I often find myself replying to claims that Brave, Edge, or other Chromium browsers effectively achieve the same privacy standards as Firefox + uBlock Origin (uBO). This is simply not true. Brave and other Chromium browsers are constrained by Google's Manifest V3. Brave works around this by patching Chromium and self-hosting some MV2 extensions, but it is still swimming upstream against the underlying engine. Firefox does not have these MV3 constraints, so uBlock Origin on Firefox retains more powerful, user-controllable blocking than MV3-constrained setups like Brave + uBO Lite. Brave is an excellent product and what I used for a long time. But the comparison often ignores structural realities. There are important nuances that make Firefox the more future-proof platform for privacy-conscious users. Manifest V3 permanently nerfs Chromium-based browsers # The core issue is Manifest V3 (MV3). This is Google's new extension architecture for Chromium (what Chrome, Brave, and Edge are built on). Under Manifest V2, blockers like uBO used the blocking version of the webRequest API (webRequest + webRequestBlocking) to run their own code on each network request and decide whether to cancel, redirect, or modify it. MV3 deprecates that blocking path for normal extensions and replaces it with the declarativeNetRequest (DNR) API: extensions must declare a capped set of static rules in advance, and the browser enforces those rules without running extension code per request. This preserves basic blocking but, as uBO's developer documents, removes whole classes of filtering capabilities uBO relies on. And Google is forcing this change by deprecating MV2. Yeah, shitty. Brave's workaround for Manifest V3 # To get around the problem, Brave is effectively swimming upstream against its own engine. It does this in two ways: Native patching: It implements ad-blocking (Shields) natively in C++/Rust within the browser core to bypass extension limitations. Manual extension hosting: Brave now ## Vibe-engineering a Firefox add-on: Container Traffic Control DevFeed: [Vibe-engineering a Firefox add-on: Container Traffic Control]() Original publisher: [Read original article]() Author: Kaushik Gopal Published: 2025-09-29T02:31:35Z Content type: opinion Language: en Sources: [Kaushik Gopal's Site]() Topics: [Browser Extension](), [Firefox](), [JavaScript](), [Code review](), [GitHub](), [Software]() Tags: [code-review](), [extension](), [firefox](), [github](), [javascript](), [software]() ### AI overview An experiment in building the Container Traffic Control Firefox add-on entirely through agent-assisted development, without manually editing JavaScript. The author argues that careful instructions, prompting, pruning, testing, organization, logging, comments, and code review can produce a readable and maintainable small codebase. ### Source excerpt I wanted to test a simple claim: you can ship maintainable software by vibe-engineering end to end. I set strict constraints: New platform (I haven't built a browser extension/add-on) Language I'm no longer proficient in (JavaScript) Zero manual code editing In about a day1 I had a working Firefox add-on I could submit for review. The code meets my bar for readability and long-term change. Even the icon came from an image model.2 Introducing Container Traffic Control. Install and source - Install: Firefox add-on listing - Code: github.com/kaushikgopal/ff-container-traffic-control On the vibe-engineering process ## It's in vogue to share horror stories of decimated vibe-coded repos.3 But I'm convinced that with the right fundamentals, you can vibe-engineer4 a codebase you'd comfortably hand to another engineer. This was my experiment to vet my feelings on the subject. Granted, this was a small and arguably very simple repository, but I've also seen success with moderately larger codebases personally. It comes down to scrupulous pruning: updating system instructions, diligent prompting, and code review. I plan to write much more about this later, but let's talk about some of the mechanics of how it went: I didn't write a single line of JavaScript by hand. When I needed changes, better structure, reusable patterns, small refactors -- I asked the agent. The goal throughout was simple: keep the codebase readable and maintainable. It now has a lot of the things we consider important for a decent codebase: Tests (for the important parts) Well-organized code Clear, useful logging Code comments (uses a style called space-shuttle style programming, which I think is increasingly valuable with vibe-engineering) The best part: most of this came together over two days.5 Some example pull requests from the repository with the exact prompt I used and the plan that was generated: Here's the very first prompt I used to generate the guts of the code: # Role/Persona: - you are an expert ## exploits.club Weekly Newsletter 80 - ITW Windows Bugs, Deterministic iOS Exploits, Pwn2Own Firefox Vulns, and More DevFeed: [exploits.club Weekly Newsletter 80 - ITW Windows Bugs, Deterministic iOS Exploits, Pwn2Own Firefox Vulns, and More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-07-24T15:21:15Z Content type: news Language: en Sources: [exploits.club]() Topics: [iOS](), [Firefox](), [Windows](), [bug](), [Exploit](), [Kernel](), [Fuzzing/Fuzz testing](), [IO](), [Mozilla]() Tags: [bugs](), [cve](), [exploits](), [firefox](), [fuzzing](), [ios](), [kernel](), [love](), [windows]() ### AI overview This issue of exploits.club Weekly Newsletter reviews recent security research and resources, including white-box fuzzing with AFL++, deterministic iOS kernel exploits extended to additional chipsets, an analysis of the Windows vulnerability CVE-2025-29824 and its use in the wild, and a Mozilla Firefox vulnerability discussed in connection with Pwn2Own. ### Source excerpt The Cameraman at that Coldplay concert pic.twitter.com/MHtqBxbwC6 -- Hater Report (@HaterReport_) July 18, 2025 Annnnnnnyways 👇 80 NEWSLETTERS 🎉 In Case You Missed It... Fuzzing 1001: Introductory white-box fuzzing with AFL++ - new course from OST2! Pwnie Nominees for 2025 - Released this week. Check them out!! Resources ## Why Switch to Firefox: Open Source, Ad Blocking, and Android Extensions DevFeed: [Why Switch to Firefox: Open Source, Ad Blocking, and Android Extensions]() Original publisher: [Read original article]() Author: Kaushik Gopal Published: 2025-07-18T00:00:00Z Content type: opinion Language: en Sources: [Kaushik Gopal's Site]() Topics: [Firefox](), [uBlock Origin Filters](), [Chrome](), [firefox for android](), [Firefox extension](), [Open Source]() Tags: [ads](), [android](), [blocking](), [chrome](), [extensions](), [firefox](), [open-source]() ### AI overview An opinionated guide encouraging readers to switch to Firefox, citing its open-source code, support for uBlock Origin, synchronization on Android, and mobile browser extensions. ### Source excerpt Chrome finally pulled the trigger on the web's best ad-blocker, uBlock Origin. Now that Chrome has hobbled uBO, Firefox -- my beloved --1 is surging again. I want to do my part to convince you to switch to Firefox and show you how I use it. Why Firefox # Let's get through the important talking points, in case you need a quick copy paste to convince a friend. 100% open-source Un-enshittify the web Android users rejoice Customize to your heart's content 100% open-source ## This section can be quick. Here's a github link to the source code of the Firefox browser. You can clone the repo, pop open your favorite AI code assistant and start asking questions about your browser - the most important app you use. What libraries does their Android app use? libs.versions.toml boom! Also 8.11.1 on android gradle plugin? not bad Firefox. Their license allows you to fork and distribute alternative versions. Vibe code a whole new browser. Un-enshittify the web ## Most of the web today is enshittified with a cesspool of ads, popups, cookie notices, and tracking scripts. Our primary defense has been ad-blockers, with the most powerful being uBlock Origin. uBO relies on community-curated filter lists that play a cat-and-mouse game to zap known ads, trackers, and other digital sludge. But with Chrome controlling the web, Google followed through on its promise to kneecap uBO with Manifest V3, effectively blocking the full version from its extension store. Sure, there's uBlock Origin "Lite" now, which does the same thing, right? Nope: uBlock Origin Lite != uBlock Origin Filter lists update only when the extension updates no fetching up to date lists from servers (this is a big one!) No custom filters so no element picker which allows you to point and zap Many filters are dropped at conversion time due to MV3's limited filter syntax No strict-blocked pages No per-site switches No dynamic filtering No importing external lists Did you know, uBlock Origin works best on Firefox. Why not just use ## Bootstrap 5.3.5 DevFeed: [Bootstrap 5.3.5]() Original publisher: [Read original article]() Author: Mark Otto Published: 2025-04-04T15:22:00Z Content type: release Language: en Sources: [Bootstrap.com]() Topics: [Bootstrap](), [Firefox](), [npm](), [changelog](), [CSS](), [Maintainers]() Tags: [changelog](), [dependency](), [documentation](), [firefox](), [github](), [maintainers](), [npm](), [release](), [v5]() ### AI overview Bootstrap v5.3.5 is a hotfix for an upstream Autoprefixer regression that caused floating form labels to remain floated in Firefox because of unintended CSS output. The release also includes documentation and dependency updates and was published to npm. ### Source excerpt Bootstrap v5.3.5 was released as a hotfix for a regression from upstream in Autoprefixer that caused floating form labels to always be "floated" in Firefox due to unintended CSS output. Read the GitHub v5.3.5 changelog for a full list of changes (including a ton of documentation and dependency updates) in this release. Get the release Head to https://getbootstrap.com for the latest. It's also been pushed to npm: npm i bootstrap@v5.3.5 Support the team Visit our Open Collective page or our team members' GitHub profiles to help support the maintainers contributing to Bootstrap. ## A Firefox addon for putting prices into perspective DevFeed: [A Firefox addon for putting prices into perspective]() Original publisher: [Read original article]() Author: April 4 Published: 2025-04-04T00:00:00Z Content type: opinion Language: en Sources: [Drew DeVault]() Topics: [Firefox]() Tags: [firefox]() ### AI overview The author introduces Price Perspective, a Firefox add-on that compares the cost of purchases with the income and purchasing power of people in different economic circumstances. Examples involving pizza, homes, and extreme wealth illustrate differences in relative affordability. ### Source excerpt I had a fun idea for a small project this weekend, and so I quickly put it together over the couple of days. The result is Price Perspective. Humor me: have you ever bought something, considered the price, and wondered how that price would look to someone else? Someone in the developing world, or a billionaire, or just your friend in Australia? In other words, can we develop an intuition for purchasing power? The Price Perspective add-on answers these questions. Let's consider an example: my income is sufficient to buy myself a delivery pizza for dinner without a second thought. How much work does it take for someone in Afghanistan to buy the same pizza? I can fire up Price Perspective to check: The results are pretty shocking. How about another example: say I'm looking to buy a house in the Netherlands. I fire up funda.nl and look at a few places in Amsterdam. After a few minutes wondering if I'll ever be in an economic position to actually afford any of these homes (and speculating on if that day will come before or after I have spent this much money on rent over my lifetime), I wonder what these prices look like from the other side. Let's see what it'd take for the Zuck to buy this apartment I fancy: Well... that's depressing. Let's experiment with Price Perspective to see what it would take to make a dent in Zuck's wallet. Let's add some zeroes. So, Zuckerberg over-bidding this apartment to the tune of EUR 6.5B would cost him a proportion of his annual income which is comparable to me buying it for EUR 5,000. How about the reverse? How long would I have to work to buy, say, Jeff Bezos's new mansion? Yep. That level of wealth inequality is a sign of a totally normal, healthy, well-functioning society. Curious to try it out for yourself? Get Price Perspective from addons.mozilla.org, tell it where you live and how much money you make in a year, and develop your own sense of perspective. ## Improving Firefox Stability in the Enterprise by Reducing DLL Injection DevFeed: [Improving Firefox Stability in the Enterprise by Reducing DLL Injection]() Original publisher: [Read original article]() Author: Haik Aftandilian Published: 2025-03-25T18:31:16Z Content type: article Language: en Sources: [Mozilla Hacks - the Web developer blog]() Topics: [Firefox](), [data loss prevention](), [Security](), [Windows](), [Mozilla]() Tags: [blog](), [data-loss-prevention](), [enterprise](), [feature](), [firefox](), [mozilla](), [security](), [web-browser](), [windows]() ### AI overview Firefox 138 will provide an alternative to DLL injection for enterprise Data Loss Prevention deployments. The article explains how third-party DLLs injected into Firefox can cause incompatibilities, crashes, security bypasses, and other unpredictable behavior, especially as the browser changes frequently. ### Source excerpt Beginning in version 138, Firefox will offer an alternative to DLL injection for Data Loss Prevention (DLP) deployments in enterprise environments. DLL Injection DLL injection into Firefox is a topic we've covered on the Hacks blog before. In 2023, we blogged about the Firefox capability to let users block third-party DLLs from being loaded. We [...] The post Improving Firefox Stability in the Enterprise by Reducing DLL Injection appeared first on Mozilla Hacks - the Web developer blog. ## Introducing the Keycloak Test Framework DevFeed: [Introducing the Keycloak Test Framework]() Original publisher: [Read original article]() Author: Lukas Hanusovsky Published: 2024-11-14T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [Testing](), [Framework](), [Maven](), [OAuth](), [browsers](), [Chrome](), [Firefox](), [SDK]() Tags: [browsers](), [chrome](), [firefox](), [framework](), [guide](), [idm](), [kerberos](), [keycloak](), [ldap](), [maven](), [oauth](), [openid-connect](), [saml](), [sdk](), [sso](), [test](), [testing]() ### AI overview Keycloak introduces a new test framework designed to replace its current Arquillian-based test suite. The JUnit 5 extension supports custom injection, server and database lifecycles, clients and users, OAuth, UI testing, WebDriver integration, and multiple browsers. The framework is available in the main branch and nightly builds, with migration from the old testsuite beginning. ### Source excerpt How It All Started The idea to replace the current test suite has been on the table for multiple years. Initially, it was meant to be only a refactoring of the current approach on how to write tests, but after a few internal discussions and refactor updates it turned out a new test suite, based on a new framework would be a better solution. It would be good to mention a few drawbacks, that stand out when working with the current test suite. First of all, is the complexity of various configurations and additions made on top of the Arquillian framework. These changes make the test suite powerful, but the cons is that without proper documentation for beginners is almost unreadable. The second thing has the same importance, the Arquillian framework is not fully supported anymore. Other things to mention are a complicated execution system, where you want to specify what exactly should be tested, then abstract classes with shared configurations and missing the option to add a custom extension. Brighter Future? The Keycloak team began an effort to design a new test framework in May 2024. It started with a prototype to verify if our ideas were feasible. The prototype is a JUnit5 Extension based on the JUnit5 testing framework, specifically to implement JUnit5 callback classes which extend the default test lifecycle functionality and provide custom inject annotations, like @KeycloakIntegrationTest, @InjectWebDriver or @InjectRealm. After a successful test round, we've continued with a proof of concept extending features list to support multiple server modes, different databases and WebDrivers, clients and users setup, SmallRye configuration support, OAuthClient based on Nimbus SDK (this feature is a preview only) etc. The full list of currently implemented features is: Maven BOM Core module Server lifecycle Database lifecycle Admin client injection Realm, User, Client lifecycle and injection Event and Admin event listener and injection OAuth client injection UI module WebDri ## Concealing payloads in URL credentials DevFeed: [Concealing payloads in URL credentials]() Original publisher: [Read original article]() Author: Gareth Heyes Published: 2024-10-23T12:59:05Z Content type: article Language: en Sources: [PortSwigger Research]() Topics: [payload](), [browsers](), [Chrome](), [Firefox](), [Document Object Model (DOM)](), [Vulnerabilities](), [Fuzzing/Fuzz testing](), [Redirection]() Tags: [browsers](), [chrome](), [firefox](), [fuzzing](), [payload](), [redirection](), [vulnerabilities]() ### AI overview This article explains how payloads can be concealed in the credentials portion of URLs while remaining hidden from the address bars of Chrome and Firefox. It examines differences between document.URL and location, Firefox's handling of single quotes, and applications to DOM XSS, anchor credentials, redirection, and DOM clobbering. Safari discards URL credentials, so the described examples work only in Chrome and Firefox. ### Source excerpt Last year Johan Carlsson discovered you could conceal payloads inside the credentials part of the URL . This was fascinating to me especially because the payload is not actually visible in the URL in [Next page]()