(800) 991-6241

Firefox is a common search engine used by many, and commonly viewed as a safer way to search.  Firefox holds around 20% of the global search market and is hoping to capture more.  They have recently released the new and improved Firefox 16.  While it does have some bugs, most new releases do, they have improved its overall features and most people seem to be pleased with how well it functions.  Web developers will like that certain features have been added and regular web surfers will benefit from the changes as well.

Here is what’s new with Firefox 16:

  • Default VoiceOver support on Mac OS X,  
  • Initial Web app support for Windows, Mac and Linux
  • The back button now works on websites that quickly redirect.
  • Cleaned up staticLevel and UpvarCookie handling
  • Volume control in video files is fixed
  • Use-after-free in the IME State Manager 
  • Heap memory corruption issues found using Address Sanitizer
  • Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer
  • Spoofing and script injection through location.hash
  • Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties 
  • Object and location property accessible by plugins GetProperty function can bypass security checks
  • Crash with invalid cast when using instanceof operator 
  • DOS and crash with full screen and history navigation
  • Reader mode page have chrome privileges
  • Some DOMWindowUtils methods bypass security checks 
  • Continued access to initial origin after setting document.domain 
  • select element persistance allows for attacks

There were specific changes that make Firefox 16 better for developers including:

  • <input> now allows filtering based on arbitrary mimetypes in accept.  (bug 565274)
  • Some DOMWindowUtils methods bypass security checks Continued access to initial origin after setting document.domain select element persistance allows for attacks