Firefox 109.0

Manifest Version 3 (MV3) extension support is now enabled by default ( MV2 remains enabled/supported ). This major update also ushers an exciting user interface change in the form of the new extensions button .

The Arbitrary Code Guard exploit protection has been enabled in the media playback utility processes, improving security for Windows users.

The native HTML date picker for date and datetime inputs can now be used with a keyboard alone, improving its accessibility for screen reader users. Users with limited mobility can also now use common keyboard shortcuts to navigate the calendar grid and month selection spinners.

Firefox builds in the Spanish from Spain (es-ES) and Spanish from Argentina (es-AR) locales now come with a built-in dictionary for the Firefox spellchecker.

Effective on January 16, Colorways will no longer be in Firefox. Users will still be able to access saved and active Colorways from the Add-ons and themes menu option.

On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls the page instead of zooming. This avoids accidental zooming and matches the behavior of other web browsers on macOS.

The Recently Closed section of Firefox View now equips users with the ability to manually close/remove url links from the list.

The empty state messages and graphic components surfaced in Firefox View for the Tab Pickup and Recently Closed sections have been updated for an improved user experience.

Various security fixes.

Various bug fixes and new policies have been implemented in the latest version of Firefox. You can find more information in the Firefox for Enterprise 109 Release Notes .

Developer Information

The ability to automatically break when code on the page hits an events handler has been available since Firefox 69. Firefox 109 now adds new support for the scrollend event. To use this new event breakpoint, open the JS debugger and find and expand the Event Listener Breakpoints section in the right hand column ( learn more ).

Manifest V3 is now supported with the ability to sign and release Manifest V3 extensions on AMO. See the Manifest v3 signing available November 21 on Firefox Nightly blog post for more information. The following preview features are now fully available:

The scripting API, although this has been available to Manifest V2 extensions from Firefox 102.

The action API, and "action" manifest key and _execute_action special shortcut in the manifest commands key.

The "host_permissions" manifest key.

The default Content Security Policy (CSP) for Manifest V3 extensions has been updated to include upgrade-insecure-requests . This means that, by default, all network requests are upgraded to use https: . Extensions that need to use http: can do so by overriding the default CSP using the content_security_policy manifest.json key ( Firefox bug 1797086 ).

The property secretKeyLength has been added to webRequest.SecurityInfo . This property provides the length in bits of the secret key in the security properties of a web request ( Firefox bug 1778473 ).

With the introduction of the extensions button , the default value of default_area in the action and browser_action manifest keys has changed from "navbar" to "menupanel" ( Firefox bug 1799947 ).

Support for omnibox.onDeleteSuggestion and the deletable property in omnibox.SuggestResult , enabling extensions to react to a user deleting an address bar search result ( Firefox bug 1799947 ).

Support for the top and left parameters to determine positioning of panel or popup window using windows.create() ( Firefox bug 1271047 ).

The scrollend event is now enabled by default. The event is fired when a scroll has completed.

Firefox now permanently partitions Storage in third-party contexts independent of Storage Access to align with other browsers and provide better Web compatibility.

The range element supports the list attribute, which links via an id to a <datalist> to allow Firefox to display tick marks along the range.

The <system-color> CSS data type now supports the values Mark , MarkText , and ButtonBorder ( Firefox bug 1638052 ).

SVGGraphicsElement.getTransformToElement() has been removed. This follows its removal from the SVG2 specification in 2015, and from other major browsers. ( Firefox bug 1803790 ).

The SVGGraphicsElement.nearestViewportElement and SVGGraphicsElement.farthestViewportElement attributes have been disabled by default in nightly and early beta builds (behind preference svg.nearestAndFarthestViewportElement.enabled ). SVGElement.viewportElement can be used as an alternative to SVGGraphicsElement.nearestViewportElement . They have been removed from the SVG2 specification and are likely to be removed entirely from Firefox in a future release. ( Firefox bug 1133174 ).

The 'unsafe-hashes' value for Content-Security-Policy source directives is now supported. For more information, see CSP unsafe-hashes ( Firefox bug 1343950 ).

The scrollend events are now supported, which indicate that the user has completed scrolling in Element and Document objects. For more information, see Element: scrollend event and Document: scrollend event ( Firefox bug 1797013 , Firefox bug 1803435 ).

The connection details for WebDriver BiDi are now written to WebDriverBiDiServer.json instead of WebDriverBiDiActivePort , which contains both the port ( ws_port ) and the host ( ws_host ). This file is located in the Firefox profile folder ( Firefox bug 1792875 ).

Added support for subscribing / unsubscribing to individual contexts when using session.subscribe and session.unsubscribe ( Firefox bug 1723102 ).

Added support for serializing Node objects ( Firefox bug 1770731 ).

Fixed the columnNumber for exceptions and stackTraces to be 0-based ( Firefox bug 1796073 ).

Fixed a bug where WebDriver:NewWindow and WebDriver:SwitchToWindow were not focusing the new window properly ( Firefox bug 1798655 ).

Fixed a bug where WebDriver:FindElement (and similar commands) would fail if the Firefox window was occluded by other applications on Windows ( Firefox bug 1802473 ).

Razvan Cojocaru: Bug 1685648 , Bug 1800530