ToDo: diffs FF98-FF99

[earthlng]

FF99 is scheduled for release Apr. 5th

FF99 release notes
FF99 for developers
FF99 security advisories

---

69 diffs ( 38 new, 11 gone, 20 different )

new in v99.0:

nothing to see

removed, renamed or hidden in v99.0:

• pref("security.csp.enable", true); - 1754301 - 9aae0a6

changed in v99.0:

• for visibility/info
  • pref("dom.serviceWorkers.navigationPreload.enabled", true); // prev: false - 1750515 - MDN NavigationPreloadManager

---

ignore

click me for details

==NEW

pref("browser.urlbar.bestMatch.blockingEnabled", false);
pref("browser.urlbar.suggest.bestmatch", true);
pref("devtools.inspector.selectedSidebar", "layoutview");
pref("devtools.netmonitor.customRequest", "{}");
pref("docshell.shistory.bfcache.ship_allow_beforeunload_listeners", false);
pref("dom.script_loader.delazification.max_size", 10485760);
pref("dom.script_loader.delazification.min_mem", 2);
pref("dom.script_loader.delazification.strategy", 255);
pref("dom.streams.pipeTo.enabled", false);
pref("dom.streams.transform_streams.enabled", false);
pref("extensions.formautofill.addresses.supported", "detect");
pref("extensions.formautofill.addresses.supportedCountries", "US,CA");
pref("extensions.formautofill.creditCards.supported", "detect");
pref("extensions.formautofill.creditCards.supportedCountries", "US,CA,UK,FR,DE");
pref("extensions.pocket.refresh.hideRecentSaves.enabled", false);
pref("gfx.font_rendering.directwrite.bold_simulation", 1);
pref("intl.multilingual.aboutWelcome.languageMismatchEnabled", false);
pref("javascript.options.watchtower.megamorphic", true);
pref("layout.css.scrollbar-width-thin.disabled", false);
pref("media.videocontrols.picture-in-picture.display-text-tracks.enabled", false);
pref("network.http.encoding.trustworthy_is_https", true);
pref("network.http.useragent.forceVersion", 0);
pref("network.max_socket_process_failed_count", 1);
pref("network.trr.strict_fallback_request_timeout_ms", 6000);
pref("network.trr.strict_native_fallback_allow_timeouts", true);
pref("reader.improvements_H12022.enabled", false);
pref("services.sync.engine.tabs.filteredSchemes", "about|resource|chrome|file|blob|moz-extension");
pref("services.sync.syncedTabs.syncDelayAfterTabChange", 0);
pref("signon.usernameOnlyForm.lookupThreshold", 5);
pref("svg.use-element.graphics-element-restrictions", 1);
pref("widget.gtk.native-context-menus", false);
pref("widget.gtk.overlay-scrollbars.enabled", false);
pref("widget.gtk.theme-scrollbar-colors.enabled", true);
pref("widget.non-native-theme.scrollbar.dark-themed", true);
pref("widget.swipe.success-threshold", "0.5");
pref("widget.swipe.success-velocity-contribution", "0.05");
pref("widget.swipe.velocity-twitch-tolerance", "1e-7");
pref("widget.windows.overlay_scrollbars.enabled", false);

==REMOVED, RENAMED or HIDDEN

pref("browser.contentblocking.report.vpn.enabled", true);
pref("browser.newtabpage.activity-stream.asrouter.disable-captive-portal-vpn-promo", false);
pref("dom.script_loader.full_parse_max_size", 10485760);
pref("dom.script_loader.full_parse_min_mem", 2);
pref("editor.create_element_transaction.enabled", false);
pref("extensions.formautofill.supportedCountries", "US,CA");
pref("extensions.webextensions.background-delayed-startup", true);
pref("media.peerconnection.rtpsourcesapi.enabled", true);
pref("services.sync.engine.tabs.filteredUrls", "^(about:.*|resource:.*|chrome:.*|file:.*|blob:.*|moz-extension:.*)$");
pref("widget.gtk.alt-theme.scrollbar", false);

==CHANGED

pref("browser.contentblocking.report.vpn_regions", "at,be,ca,ch,de,fr,ie,it,my,nl,nz,sg,es,gb,us"); // prev: "us,ca,nz,sg,my,gb,de,fr"
pref("browser.newtabpage.activity-stream.discoverystream.readTime.enabled", true); // prev: false
pref("browser.urlbar.bestMatch.enabled", false); // prev: true
pref("dom.workers.requestAnimationFrame", true); // prev: false
pref("font.name-list.monospace.ar", "Consolas"); // prev: "Courier New"
pref("font.name-list.monospace.el", "Consolas"); // prev: "Courier New"
pref("font.name-list.monospace.he", "Fixed Miriam Transparent, Miriam Fixed, Rod, Consolas, Courier New"); // prev: "Fixed Miriam Transparent, Miriam Fixed, Rod, Courier New"
pref("font.name-list.monospace.x-cyrillic", "Consolas"); // prev: "Courier New"
pref("font.name-list.monospace.x-math", "Consolas"); // prev: "Courier New"
pref("font.name-list.monospace.x-unicode", "Consolas"); // prev: "Courier New"
pref("font.name-list.monospace.x-western", "Consolas"); // prev: "Courier New"
pref("gfx.canvas.accelerated.cache-items", 2048); // prev: 1024
pref("gfx.canvas.accelerated.cache-size", 256); // prev: 128
pref("gfx.offscreencanvas.domain-allowlist", "*.zoom.us"); // prev: ""
pref("gfx.offscreencanvas.domain-enabled", true); // prev: false
pref("gfx.will-change.ignore-opacity", true); // prev: false
pref("media.audio.audiosink.threshold_ms", "200.0"); // prev: "1000.0"
pref("reader.color_scheme", "auto"); // prev: "light"
pref("reader.color_scheme.values", "[\"light\",\"dark\",\"sepia\",\"auto\"]"); // prev: "[\"light\",\"dark\",\"sepia\"]"

[earthlng]

some bugzilla tickets

• browser.contentblocking.report.vpn.enabled
  Bug 1747149 - Consolidate logic for when to show VPN promo and add BrowserUtils test
  Bug 1747149 - Consolidate logic for when to show VPN promo and add BrowserUtils tests

• browser.contentblocking.report.vpn_regions
  Bug 1747149 - Consolidate logic for when to show VPN promo and add BrowserUtils test
  Bug 1747149 - Consolidate logic for when to show VPN promo and add BrowserUtils tests

• browser.newtabpage.activity-stream.asrouter.disable-captive-portal-vpn-promo
  Bug 1747149 - Consolidate logic for when to show VPN promo and add BrowserUtils test
  Bug 1747149 - Consolidate logic for when to show VPN promo and add BrowserUtils tests
  Bug 1730621 - avoid showing captive portal VPN promo in some cases,

• browser.newtabpage.activity-stream.discoverystream.readTime.enabled
  Bug 1755017 - Adding read time to Pocket newtab cards.
  Bug 1746649 - Pocket newtab some new layout prefs

• browser.urlbar.bestMatch.blockingEnabled
  Bug 1757488 - Disable best match blocking.

• browser.urlbar.bestMatch.enabled
  Bug 1755057 - Part 1: Create a feature gate/flag for the best match feature.
  Bug 1752470 - Allow quick suggest results to be best matches.

• browser.urlbar.suggest.bestmatch
  Bug 1755057 - Part 1: Create a feature gate/flag for the best match feature.

• devtools.inspector.selectedSidebar
  Bug 1639179 - Add different preferences for 3 and 2-pane default tabs.

• devtools.netmonitor.customRequest
  Bug 1744785 - [devtools] Adds a pref to persist edit and resend content across devtools sessions

• docshell.shistory.bfcache.ship_allow_beforeunload_listeners
  Bug 1741671 - Enable BFCache for pages with beforeunload event listeners on Desktop

• dom.script_loader.delazification.max_size
  Bug 1753709 - JavaScript: Add a preference to switch between delazification strategies.

• dom.script_loader.delazification.min_mem
  Bug 1753709 - JavaScript: Add a preference to switch between delazification strategies.

• dom.script_loader.delazification.strategy
  Bug 1753709 - JavaScript: Add a preference to switch between delazification strategies.

• dom.script_loader.full_parse_max_size
  Bug 1753709 - JavaScript: Add a preference to switch between delazification strategies.

• dom.script_loader.full_parse_min_mem
  Bug 1753709 - JavaScript: Add a preference to switch between delazification strategies.

• dom.serviceWorkers.navigationPreload.enabled
  Bug 1754786 - Enable NavigationPreload API.
  Bug 1750515 - Enable NavigationPreload API on Nightly.

• dom.streams.pipeTo.enabled
  Bug 1734241 - Implement ReadableStream.pipeTo.

• dom.streams.transform_streams.enabled
  Bug 1755335 - Add skeleton code for TransformStream{,DefaultController}

• dom.workers.requestAnimationFrame
  Bug 1751721 - Add Zoom to the OffscreenCanvas domain allowlist and turn it on for users.
  Bug 1749323 - Allow controlling access to OffscreenCanvas via a domain allowlist pref.

• editor.create_element_transaction.enabled
  Bug 1745877 - Get rid of CreateElementTransaction

• extensions.formautofill.addresses.supported
  Bug 1745248 - Allow each autofill feature to detect if it should be enabled depending on search region.

• extensions.formautofill.addresses.supportedCountries
  Bug 1745248 - Allow each autofill feature to detect if it should be enabled depending on search region.

• extensions.formautofill.creditCards.supported
  Bug 1745973 - Add UK, FR, DE to credit card autofill supported countries pref.
  Bug 1745248 - Allow each autofill feature to detect if it should be enabled depending on search region.

• extensions.formautofill.creditCards.supportedCountries
  Bug 1745973 - Add UK, FR, DE to credit card autofill supported countries pref.
  Bug 1745248 - Allow each autofill feature to detect if it should be enabled depending on search region.

• extensions.formautofill.supportedCountries
  Bug 1745248 - Allow each autofill feature to detect if it should be enabled depending on search region.
  Bug 1691819 - [2.1] Share required prefs to enable credit card and address form autocomplete for GeckoView.

• extensions.pocket.refresh.hideRecentSaves.enabled
  Bug 1746016 - Save to Pocket refresh home panel.

• extensions.webextensions.background-delayed-startup
  Bug 1753308 fix extension startup in tests, remove delayed startup pref

• font.name-list.monospace.ar
  Bug 1607913 - Use Consolas instead of Courier New in Windows monospace font prefs.
  Bug 1342741 - Use Menlo as default monospace font on macOS.

• font.name-list.monospace.el
  Bug 1607913 - Use Consolas instead of Courier New in Windows monospace font prefs.
  Bug 1342741 - Use Menlo as default monospace font on macOS.

• font.name-list.monospace.he
  Bug 1607913 - Use Consolas instead of Courier New in Windows monospace font prefs.
  Bug 1342741 - Use Menlo as default monospace font on macOS.

• font.name-list.monospace.x-cyrillic
  Bug 1607913 - Use Consolas instead of Courier New in Windows monospace font prefs.
  Bug 1342741 - Use Menlo as default monospace font on macOS.

• font.name-list.monospace.x-math
  Bug 1607913 - Use Consolas instead of Courier New in Windows monospace font prefs.
  Bug 1342741 - Use Menlo as default monospace font on macOS.

• font.name-list.monospace.x-unicode
  Bug 1607913 - Use Consolas instead of Courier New in Windows monospace font prefs.
  Bug 1342741 - Use Menlo as default monospace font on macOS.

• font.name-list.monospace.x-western
  Bug 1607913 - Use Consolas instead of Courier New in Windows monospace font prefs.
  Bug 1342741 - Use Menlo as default monospace font on macOS.

• gfx.canvas.accelerated.cache-items
  Bug 1754130 - Implement SharedContext for sharing WebGL state among many DrawTargetWebgls.

• gfx.canvas.accelerated.cache-size
  Bug 1754130 - Implement SharedContext for sharing WebGL state among many DrawTargetWebgls.

• gfx.font_rendering.directwrite.bold_simulation
  Bug 1587094 - Create a pref to control whether we use DirectWrite's bold simulation or multi-strike synthetic bold; default to multi-strike for webfonts.

• gfx.offscreencanvas.domain-allowlist
  Bug 1751721 - Add Zoom to the OffscreenCanvas domain allowlist and turn it on for users.
  Bug 1749323 - Allow controlling access to OffscreenCanvas via a domain allowlist pref.

• gfx.offscreencanvas.domain-enabled
  Bug 1751721 - Add Zoom to the OffscreenCanvas domain allowlist and turn it on for users.
  Bug 1749323 - Allow controlling access to OffscreenCanvas via a domain allowlist pref.

• gfx.will-change.ignore-opacity
  Bug 1754834 - Temporarily ignore will-change:opacity.
  Bug 1753442 - Add a pref to ignore will-change:opacity.

• intl.multilingual.aboutWelcome.languageMismatchEnabled
  Bug 1755519 - Add language switching to about:welcome;

• javascript.options.watchtower.megamorphic
  Bug 1754837 - Enable the megamorphic property cache.
  Bug 1753633 part 6 - Add a pref for megamorphic cache, disabled by default.

• layout.css.scrollbar-width-thin.disabled
  Bug 1748181 - Provide a pref to make scrollbar-width: thin behave as auto.

• media.audio.audiosink.threshold_ms
  Bug 1757618 - Use smaller ring buffer on anything but m1 macs.
  Bug 1754006 - Increase the processed media queue size and threshold in AudioSink.

• media.peerconnection.rtpsourcesapi.enabled
  Bug 1749802: remove media.peerconnection.rtpsourcesapi.enable.

• media.videocontrols.picture-in-picture.display-text-tracks.enabled
  Bug 1748884 - add PIP support for WebVTT supported videos

• network.http.encoding.trustworthy_is_https
  Bug 1675054 - Enable brotli encoding for trustworthy URLs, not just for https

• network.http.useragent.forceVersion
  Bug 1753805 - Add pref for enterprise users to override the User-Agent string's Firefox version.

• network.max_socket_process_failed_count
  Bug 1600309 - P2: Don't use socket porcess when it crashes too many times,

• network.trr.strict_fallback_request_timeout_ms
  Bug 1564310 - Increase the DoH timeout period in strict fallback mode

• network.trr.strict_native_fallback_allow_timeouts
  Bug 1564310 - Allow fallback in strict mode for request timeouts

• reader.color_scheme
  Bug 1594828 - Changed Reader Mode color scheme preference to be based off of browser content theme.

• reader.color_scheme.values
  Bug 1594828 - Changed Reader Mode color scheme preference to be based off of browser content theme.

• reader.improvements_H12022.enabled
  Bug 1753117: Add pref for UI changes to Reader Mode.

• security.csp.enable
  Bug 1754301 - remove pref security.csp.enable

• services.sync.engine.tabs.filteredSchemes
  Bug 1754899: Call sync after location change

• services.sync.engine.tabs.filteredUrls
  Bug 1754899: Call sync after location change
  Bug 1695519 - Remove obsolete checks and references related to wyciwyg protocol.

• services.sync.syncedTabs.syncDelayAfterTabChange
  Bug 1752664 - sync shortly after a tab change event

• signon.usernameOnlyForm.lookupThreshold
  Bug 1753588 - Restrict the number of form looked up while checking whether autofilling a username-only form

• svg.use-element.graphics-element-restrictions
  Bug 1754522 - Limit cross-document content loadable via <svg:use>.

• widget.gtk.alt-theme.scrollbar
  Bug 1754225 - Allow using dark themed scrollbars on GTK too.

• widget.gtk.native-context-menus
  Bug 1757402 - Add basic native context menu support on GTK.

• widget.gtk.overlay-scrollbars.enabled
  Bug 1755457 - Fix build bustage related to StaticPrefList.yaml.
  Bug 1147847 - Enable GTK overlay scrollbars on Nightly and Early Beta.
  Bug 1147847 - Allow users to enable overlay scrollbars on Linux from about:preferences.

• widget.gtk.theme-scrollbar-colors.enabled
  Bug 1753830 - Add a pref to allow disabling themed scrollbar colors.

• widget.non-native-theme.scrollbar.dark-themed
  Bug 1754225 - Allow using dark themed scrollbars on GTK too.

• widget.swipe.success-threshold
  Bug 1753146 - Add preferences for tweaking swipe gestures.

• widget.swipe.success-velocity-contribution
  Bug 1753146 - Add preferences for tweaking swipe gestures.

• widget.swipe.velocity-twitch-tolerance
  Bug 1753146 - Add preferences for tweaking swipe gestures.

• widget.windows.overlay_scrollbars.enabled
  Bug 1757647 - Implement Windows 11 overlay scrollbars.

[fxbrit]

• gfx.offscreencanvas.domain-enabled looks interesting (at least knowledge wise), but I need to educate myself on how offscreenscanvas is implemented and https://bugzilla.mozilla.org/show_bug.cgi?id=1422862#c5.
• for the record network.http.useragent.forceVersion doesn't override the RFP-set user agent.
• I wanted to see what changes with reader.improvements_H12022.enabled = true, but it looks the same to me :-(

[Thorin-Oakenpants]

offscreen canvas doesn't impact fingerprinting (besides the API being enabled or not), as JS can't read back any info AFAICT, and upstream tom ritter has his eye on it anyways

• FF96 1735874 Fix broken resist fingerprinting with OffscreenCanvas on worker threads
• FF97 1736177 Add initial implementation of OffscreenCanvas + WebGL

https://bugzilla.mozilla.org/show_bug.cgi?id=1422862#c5 (tom ritter)

Yes, this sounds like we misunderstood the feature when we initially filed this bug (so as not to forget about it.) If there is no way for an OffscreenCanvas to actually give its rendered content via an API (like there is for canvas through e.g. toDataURL), and all it can do it stick it into a canvas (where permission prompts work) or another object that can't be read via Javascript (like an <img> tag) - then we are fine here

TBH I don't understand all of this yet either (it also involves webGL + workers) but I did test

• gfx.offscreencanvas.enabled = true
• gfx.offscreencanvas.domain-allowlist = "*.canvasblocker.kkapsner.de" (not sure if this is needed)
• CB canvas test page

I get (offscreen and offscreen worker)

• Firefox: Error while computing: context.fillText is not a function
  • this is on nightly 101 and it doesn't seem like it's hooked up yet - IDK, not worried about it (yet)
  • or maybe I'm not flipping the right things or using the right tests?
• Blink: no errors

[prettyv]

I wanted to see what changes with reader.improvements_H12022.enabled = true, but it looks the same to me :-(

Thought the same at first, but after resetting reader.color_scheme to the new default of "auto" (was set to "dark" before) reader mode set the preference to "light" with reader.improvements_H12022.enabled set to the default false, and leaves the pref untouched and shows the dark theme with it set to true. So for new installs I guess you'd need to turn the pref on to get the expected color scheme now, at least I did on my Arch Linux KDE environment.

[Thorin-Oakenpants]

pretty sure reader view doesn't allow JS to execute (but I'll check) but FYI

• load test page
• flip to reader view
• open console
• paste the following snippet

console.log(document.body.classList.value, document.body.getAttribute("style"))

example

• we could even check for aria elements to detect if that is enabled