Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

ძიება მხარდაჭერაში

ნუ გაებმებით თაღლითების მახეში მხარდაჭერის საიტზე. აქ არასდროს მოგთხოვენ სატელეფონო ნომერზე დარეკვას, შეტყობინების გამოგზავნას ან პირადი მონაცემების გაზიარებას. გთხოვთ, გვაცნობოთ რამე საეჭვოს შემჩნევისას „დარღვევაზე მოხსენების“ მეშვეობით.

ვრცლად

Major security issue Firefox 63.0.3 logins and passwords no longer log out, even on re-start/reboot

  • 3 პასუხი
  • 1 მომხმარებელი წააწყდა მსგავს სიძნელეს
  • 1 ნახვა
  • ბოლოს გამოეხმაურა cor-el

Since upgrading to FF 63.0.3 (on three machines), Firefox will no longer log out of password-protected websites when browser is closed/restarted. Even on a clean shut down/reboot of the entire system, all https websites remain logged in. This is a major security issue.

Suggested solutions I have tried:

1. Refresh Firefox

2. Safe mode restart with all addons/extensions disabled

3. Complete uninstall/reinstall of Firefox

4. Adding https sites (such as Yahoo mail) to 'Exceptions - Saved Logins'

5 Changing 'about:config browser.sessionstore.privacy_level from 0 to 1 (and 2)

All have failed.

All three machines:

Browser: FF 63.0.3 System: Windows 8.1 Pro

Update: One of the three Windows 8.1 Pro machines Firefox browsers is functioning correctly (automatic log out on any session re-start). The other two persist with the security error.

Since upgrading to FF 63.0.3 (on three machines), Firefox will no longer log out of password-protected websites when browser is closed/restarted. Even on a clean shut down/reboot of the entire system, all https websites remain logged in. This is a major security issue. Suggested solutions I have tried: 1. Refresh Firefox 2. Safe mode restart with all addons/extensions disabled 3. Complete uninstall/reinstall of Firefox 4. Adding https sites (such as Yahoo mail) to 'Exceptions - Saved Logins' 5 Changing 'about:config browser.sessionstore.privacy_level from 0 to 1 (and 2) All have failed. All three machines: Browser: FF 63.0.3 System: Windows 8.1 Pro Update: One of the three Windows 8.1 Pro machines Firefox browsers is functioning correctly (automatic log out on any session re-start). The other two persist with the security error.

ყველა პასუხი (3)

Update 12/5: the correctly functioning FF 63.0.3 has now reverted back to the reported error above.

Does that mean the issue is resolved?

Firefox will not log out of any site unless you tell it to.

This will have Firefox log out of all sites when the browser closes;

Type about:preferences#privacy<enter> in the address bar. The button next to History, select Use Custom Settings.

Turn off Always Use Private Browsing Mode Turn on Remember My Browsing And Download History At the bottom of the page, turn on Clear History When Firefox Closes. At the far right, press the Settings button. Turn on Cache and Form And Search History.

Also turn off Active Logins.

If clearing cookies didn't help then It is possible that the cookies.sqlite file in the Firefox profile folder that stores the cookies got corrupted.

  • rename/remove cookies.sqlite (cookies.sqlite.old) and if present delete cookies.sqlite-shm and cookies.sqlite-wal in the Firefox profile folder with Firefox closed in case cookies.sqlite got corrupted.

You can use the button on the "Help -> Troubleshooting Information" (about:support) page to go to the current Firefox profile folder or use the about:profiles page.


You can create a new profile to test if your current profile is causing the problem.

See "Creating a profile":

If the new profile works then you can transfer files from a previously used profile to the new profile, but be cautious not to copy corrupted files to avoid carrying over problems.