Mozilla Firefox

Is anyone else seeing this on the Google homepage when using Firefox?

 

What is that image? Signed in or signed out of Google in Firefox?
Can you please try being signed in and signed out of Google in Firefox?

 

Same signed in or out.

 

Are you using Windows 10 or 11?
I think it might be a Windows 11 issue.

Edit: I see you're using Windows 11.

 

win 11 x64 v. 22621.1344 (last patch tues. update release 08MAR23)

url=https://www.google.co.uk/ or https://www.google.com/

(see my signature details)

 

OK. Thanks for the info.

It's happening to me on Windows 11 when signed in to Google using Firefox.
If I sign out of Google, it goes back to normal.

Chrome and Edge are not affected.

 

Same signed in/out of google itself.
Could be an add-on/extension you have & I don't.

 

co.uk not, com yes. its a google design error, nothing in firefox.

 

I just tested it, and I also get the problem with https://www.google.co.uk/ when signed in to Google. Only when using Firefox.

 

No

 

Yes it is occuring on Windows 11 with Firefox 113 nightly, but not with Firefox 111. Here is the code ot fix it:

/* this is the userContent.css file */
@-moz-document domain("google.com"){.RNNXgb { height:84px !important; } }

I found this over at:
https://www.elevenforum.com/t/google-search-field-in-firefox-is-double-height.13274/page-2

 

Win11, Firefox 113 current (means today), and Win11 Firefox 111 - no issue, height is ok. Win10 same.
my previous test was windows 10 and firefox 110. as i stated, i dont think its firefox, its google.
google is running randomly design tests, like the pics for results.

 

Firefox just updated to 111.0, and the Google issue is fixed.

 

Looks like 14 security fixes in 111.

Security Vulnerabilities fixed in Firefox 111

Firefox 111 Release Notes

 

thank you for pointing that out. again a lot of reasons to update. user can be sure that such leaks are currently in use ITW.

 

It was a bit premature saying that the bug is fixed.
Before the Firefox update, this Google bug only affected me when I was logged in to Google, now the problem only affects me when I'm logged out.

I have read on other sites that some people experience this bug logged in, and some people experience it logged out.

 

I must say this quite an impressive feature. Normally I would use a behavior blocker for this stuff. Although it's not clear yet if this will interfere with security software.

https://hacks.mozilla.org/2023/03/letting-users-block-injected-third-party-dlls-in-firefox/

 

Thank you very much, no DDL injected here.

 

about:third-party doesn't work in Firefox 111.0.1 (64-bit) running on Linux. I'm guessing because DLL's aren't used in Linux

 

Mine only shows hmpalert.dll from HMPA. Funnily enough, it is signed by 'Microsoft Windows Hardware Compatibility Publisher' but the page says it regards every module not signed by Mozilla or Microsoft as a Third Party. It probably doesn't count that signer as 1st/2nd party then.

Correct, DLL are Windows-specific.

 

But can you also block this DLL from HMPA? Because I assume HMPA injects this DLL via its driver, so if yes, then these DLL blocking methods used by Firefox and Chrome are pretty good. But would it also block banking trojans, is another question.

 

Yes, I can block it and verified it is no longer loaded into Firefox with Process Explorer.

 

OK cool, then this stuff is more advanced than I thought. However, what isn't clear is if you will always first need to allow DLL injection in order to then block them?

 

I'm suspecting that will be the case most of the time.

 

There is nothing to allow, it only shows 3rd party modules that are already injected and you have the choice to pick something from the list and block it. So if a module crashes Firefox, causes compatibility problems or reduces performance you can block it. It's not a malware defense.
Maybe it can block a banking trojan DLL, but then you have to check if it's there first and block it.