Firefox 153 release notes for developers (Beta)

Changes for web developers

CSS

Fix for nested scrollable areas

This implementation has been added in order to fix an issue where scrollable content was unreachable. If a scrollbar is set to display: none; or width: 0; then the scrollbars of nested scrollable areas would be stacked on top of each other meaning that some of the content may well be unreachable. This does however mean that the @supports selector(::-webkit-scrollbar) check will return true even though the ::-webkit-scrollbar pseudo-element is not truly supported. (Firefox bug 2038877).

APIs

Media, WebRTC, and Web Audio

• The RTCDtlsTransport.getRemoteCertificates() method gets the certificates used by the remote peer to secure the DTLS communication. These can be used for application-layer authentication of a remote peer. (Firefox bug 1805446).

Changes for add-on developers

• Extensions now require explicit user permission to access file:// URLs. Previously, access to local files was covered by the "Access your data for all websites" host permission. This change introduces a separate "Access local files on your computer" option in the extension's permissions settings (desktop only), and file access is turned off by default for all extensions, including existing ones. The extension.isAllowedFileSchemeAccess() method now correctly returns true if the user has granted file scheme access; previously, Firefox always returned false. Additionally, calling devtools.inspectedWindow.eval() on file:// URLs now requires this permission. (Firefox bug 2034168)
• Supports the userScripts.execute() method, enabling extensions to inject user scripts on demand into a tab or frame. Unlike userScripts.register(), this method supports one-off injection of multiple script sources executed in a defined order. (Firefox bug 1930776)
• Adds the publicSuffix API, enabling extensions to determine the registrable domain (eTLD+1) and public suffix of a hostname using the browser's built-in Public Suffix List. The API provides three synchronous methods: publicSuffix.isKnownSuffix(), publicSuffix.getKnownSuffix(), and publicSuffix.getDomain(). (Firefox bug 1315558)
• Extension content scripts can now read and modify constructed stylesheets in document.adoptedStyleSheets and ShadowRoot.adoptedStyleSheets, without .wrappedJSObject. (Firefox bug 1751346)
• Adds documentId to a range of WebExtension APIs, including a new runtime.getDocumentId() method, webNavigation events and methods, webRequest events, scripting injection targets, and messaging APIs. See Work with documentId for the full list of supported events and methods, along with guidance on using documentId. (Firefox bug 1891478)
• For contextual identities (containers):
  • Adds the contextualIdentities.getSupportedColors() and contextualIdentities.getSupportedIcons() methods to retrieve the supported colors and icons, avoiding the need to hardcode those values. (Firefox bug 2044712)
  • Updates the colors available. "turquoise" is renamed to "cyan", "toolbar" is renamed to "gray", and "violet" is added. The legacy names "turquoise" and "toolbar" are accepted for backward compatibility. To avoid hardcoding color names, use contextualIdentities.getSupportedColors() to retrieve the available colors. (Firefox bug 2044354)

Experimental web features

These features are shipping in Firefox 153 but are disabled by default. To experiment with them, search for the appropriate preference on the about:config page and set it to true. You can find more such features on the Experimental features page.