2005-02-05 Trunk builds
- Fixed: 280056 - Security hole.
- Fixed: 280664 - Security hole.
- Fixed regression: 279285 - Keyboard freeze opening invalid URL in new tab (since Jan 17).
- Fixed: Part of 278019 - Prevent crash after secure->insecure transition (Firefox 1.0 topcrash).
- Fixed: 268352 - Text cursor is placed on wrong position when typing too much in an input field.
- Fixed: 236596 - Form element cannot get focus when loaded by XML/XSLT page.
- Since Feb 1: 280675 - Accessibility API totally broken in 2/1/05 Firefox builds. (Affects screen-reader users.)
- Since ~Jan 22: 279497 - Selected profile does not always appear focused.
- Since ~Jan 16: 278759 - Update dialog takes entire screen, closes browser if finished OR cancelled.
- Since ~Jan 12: 278143 - "Force links that open new windows to open in tab" does not work for links inside mail body in GMail.
- Since ??: 278544 - Location bar of newly created tabs is not focussed after using find-as-you-type (not Ctrl-F); workaround: Ctrl-F.
- Since ??: 273200 - Ctrl+W in Find bar breaks middle-clicking links, find toolbar, and back button.
- Since Aviary landing: 272566 - Page Info security tab missing.
- Since Aviary landing: 272556 - about: is broken.
- Since Aviary landing: 231361 - Download manager doesn't show downloaded filesize after 1MB if the filesize is "unknown".
- Since Aviary landing: 273785 - Plugins not scanned/detected on startup (empty plug-ins dialog in downloads, open-with dialog for PDFs).
- Missing from trunk: 176177 - History, Bookmarks and Highlight buttons don't have a pressed state in WinXP Luna.
- Since November on trunk: 269927 - All-black tooltip appears after closing tab.
- Since September on trunk: 260951 - Go menu doesn't display recent page history until second opening.
Official Windows,
Official Windows installer,
Official Windows MSI
(discussion),
bangbang's,
bluefyre's,
stipe's
February 6th, 2005 at 2:09 am
only 364 days out!
February 6th, 2005 at 9:49 am
OSX build for today 20050206 will not start at all on my Mac OSX 10.3.7.
First time, it asked me what Profile to use — I thought I’d accidentally started it twice and exited. After that it hasn’t loaded at all. Restart doesn’t help, fresh download doesn’t help, removing my Profile entirely doesn’t help. I copied in an older Firefox from backup (0128) and that works fine. I’m going back to yesterday’s build.
February 7th, 2005 at 8:08 am
Are one of the security holes that were fixed the URL spoofing one listed at http://www.shmoo.com/idn/ ?
February 7th, 2005 at 9:48 am
DLR,
This build does not appear to address that security issue.
February 7th, 2005 at 10:12 am
No. Homograph attacks are https://bugzilla.mozilla.org/show_bug.cgi?id=279099. There was a long discussion about how to handle homograph attacks on the security group mailing list after that bug was filed.
February 7th, 2005 at 10:29 am
Hmm, don’t have authorisation to view that bug. I’m guessing it’s a not fixed security bug?
February 7th, 2005 at 9:19 pm
Hm, I can see URI posted by Jesse with no problems. And it seems that devs haven’t fixed the problem yet.
February 8th, 2005 at 2:48 pm
DLR, try again. The bug for the homograph attack was marked as security-sensitive yesterday when I posted the URL, but now it’s public.
February 9th, 2005 at 2:22 pm
Both the security bugs mentioned are public now.
February 12th, 2005 at 10:25 am
Hey, I don’t see you CC’d on bug 280603. I definitely think it is burning-edge worthy.
February 12th, 2005 at 4:16 pm
I listed it as “fixed” in my previous post. Did I screw up?
February 16th, 2005 at 5:56 am
It wasn’t actually fixed, and thus reopened.