#Firefox 37.0 beta 2 android#
#Firefox 37.0 beta 2 windows#

MFSA 2015-30 Miscellaneous memory safety hazards (rv:37.0 / rv:31.6).MFSA 2015-31 Use-after-free when using the Fluendo MP3 GStreamer plugin.MFSA 2015-32 Add-on lightweight theme installation approval bypassed through MITM attack.MFSA 2015-33 resource:// documents can load privileged pages.MFSA 2015-34 Out of bounds read in QCMS library.MFSA 2015-35 Cursor clickjacking with flash and images.MFSA 2015-36 Incorrect memory management for simple-type arrays in WebRTC.MFSA 2015-37 CORS requests should not follow 30x redirections after preflight.MFSA 2015-38 Memory corruption crashes in Off Main Thread Compositing.MFSA 2015-39 Use-after-free due to type confusion flaws.

MFSA 2015-40 Same-origin bypass through anchor navigation.

#Firefox 37.0 beta 2 android#

MFSA 2015-41 PRNG weakness allows for DNS poisoning on Android.

#Firefox 37.0 beta 2 windows#

MFSA 2015-42 Windows can retain access to privileged content on navigation to unprivileged pages.

I'll add those once they become available publicly. Security updates are released a short while after the Firefox 37 release.

URL bar displays the url instead of the page title by default now.

Support for sending videos to Matchstick devices.

You find additional information about the new interface on Medium. Other changes include a redesigned tabs tray displaying all open tabs in the browser. You will probably notice right away that tabs are on top now in the new interface. Tablet interface updates launched in Firefox 37 for Android. Below is a selection of features unique to Firefox for Android. I suggest you check out the changelog if you are interested in those. The majority of changes of the desktop version of Firefox were also implemented in the Android version.

IndexedDB now accessible from worker threads.

WebSocket now available in Web Workers.

Logging of weak ciphers in web console.

Debugger panel supports about:// and chrome:// URIs.

If the selected element on a page is animated, Firefox displays the Animations panel which displays information about it and provides you with play and pause buttons to control it. This includes connection details such as the protocol version and cipher suite used but also certificate information and security features used by the connection. The security panel lists security-related information about the selected entry in the network panel.

Opportunistically encrypt HTTP traffic if the server supports it.

Improved certificate and TLS communication security by removing support for DSA.

Added support for e-mail name constraints in certificates.

Support for local revoked intermediary certificates blocklist.

Improved protection against site impersonation.

Extended SSL error reporting to report non-certificate errors.

TLS False Start optimization requires a cipher suite using AEAD construction.

The following paragraph lists the improvements that went into Firefox 37. Security improvements are usually not something that are visible to users. To undo the change, right-click on the preference and select reset from the context menu.

Double-click the parameter and set its value to blank.

Open the about:config page again as outlined above.

If you don't want to participate in Heartbeat at all, do the following to disable the feature in the browser: I covered Heartbeat when it first appeared back in February and suggest you read the article that I wrote back then for additional information about it. Heartbeat adds a User Voice like system to Firefox allowing Mozilla to get user feedback directly from users of the browser. If you do, repeat the process to disable it again. You may run into issues on some sites if you enable that feature globally though.

To change that modify the preference and set its value to false using the method listed above. This feature is limited to YouTube by default. Reload YouTube's HMTL5 check page and you should see that the last option is supported as well now on the site.

Double-click on it to toggle its value (to true).

Confirm you will be careful if the warning appears.

Load about:config in the browser's address bar.

Tip: To enable MSE & WebM VP9 which is shown as not supported right now do the following: While you could force support previously by changing browser preferences on the about:config page of the browser, that is no longer necessary at least not for Media Source Extensions and MSE & H.264 which are both enabled by default now on the site. When you visit YouTube's HTML5 video player page you will notice that Firefox 37 supports Media Source Extension now on the site.