Publisher
Stories with reporting from Mozilla Hacks, ranked by what is gaining ground now. Each story links to the original articles.
Firefox 148 becomes the first browser to ship the standardized Sanitizer API, which lets developers sanitize untrusted HTML before inserting it into the DOM. The API offers a browser-level way to strengthen protection against cross-site scripting.
Apple, Google, Igalia, Microsoft, and Mozilla launch Interop 2026, a cross-browser initiative focused on improving web compatibility. The project selects features grounded in stable web standards and backed by test-suite coverage.
Firefox deploys CRLite, a certificate revocation checker designed to be fast and comprehensive while keeping users’ browsing activity private from Mozilla and others. The system addresses revocation checking for the large volume of TLS server certificates issued each day.
Firefox 130 introduces an experimental feature that uses an on-device AI model to generate image alt text in its built-in PDF editor. Mozilla’s stated goal is to extend the capability to general browsing for people who use screen readers.
Firefox 151 for Desktop adds support for the Web Serial API, allowing web applications to communicate with compatible serial-connected hardware without requiring native software. The supported devices include microcontrollers, development boards, 3D printers, and power meters.
Mozilla describes how it used Claude Mythos Preview and other AI models to identify and fix latent security bugs in Firefox. The account covers its approach, findings, and advice for other software projects.
Firefox offers an alternative to DLL injection for enterprise data loss prevention deployments beginning with version 138. The change provides enterprise administrators another way to integrate DLP tools while reducing reliance on a technique associated with browser stability concerns.
Mozilla Builders is sponsoring sqlite-vec, an extension led by independent developer Alex Garcia that brings vector search to SQLite. The project is intended to help application developers build local AI applications using the embedded database.
Mozilla examines snapshot fuzzing as a tool for finding vulnerabilities in Firefox inter-process communication interfaces. The work targets security boundaries between processes, which help keep their privileges separated.
Mozilla makes its RPM package available for Firefox Beta, extending the RPM-based Linux option it first introduced for Nightly. Firefox Beta lets developers test sites on a version of Firefox expected to reach regular users in the coming weeks.
Mozilla presents PACT, a proposed anonymous-credentials design for web access in an environment where sites struggle to distinguish bots from people without excluding privacy-preserving browsers. The technical discussion covers the problem, the proposed design, and issues that remain unresolved.
Interop 2025 sets out 19 browser-interoperability focus areas, including WebRTC, the Storage Access API, and CSS Zoom. The initiative builds on a 95% interoperability score in 2024 and targets persistent web-platform issues for developers.
Mozilla and Filament introduce Uniffi for React Native, a tool for using Rust in cross-platform React Native applications. It is designed to bring Rust’s safety and performance benefits to those apps through Turbo Modules.
Microsoft's 0Din is a generative AI bug bounty program focused on finding security issues in AI systems. It invites participants to help identify risks as these systems become more widely adopted.
Mozilla Builders releases Llamafile 0.8.14, an open-source tool for running large language models on local hardware. The release adds a command-line chat interface and performance improvements, with support for powerful models.
It isn’t often that new image formats land in browsers. In the early 2000s we had JPEG, GIF, and PNG. The 2010s gave us WebP, which was a modest step up from JPEG. But the 2020s have given us two new image formats that are a big step up from previous formats: AVIF and JPEG
We’re pleased to announce that, as of version 23, the Puppeteer browser automation library now has first-class support for Firefox. This means that it’s now easy to write automation and perform end-to-end testing using Puppeteer, and run against both Chrome and Firefox.
Mozilla’s llamafile project reports progress four months after launch, with growing participation from open-source AI developers. The project is among Mozilla’s three most-favorited GitHub repositories and has attracted contributors and an active Discord community.
A discussion of WebAssembly’s role on the web expands on a presentation at the 2025 WebAssembly Community Group meeting in Munich. It examines how WebAssembly has developed since its 2017 debut, when it first supported low-level languages such as C and C++.
The piece discusses how browsers can verify that web applications receive trustworthy JavaScript, a concern for sites handling sensitive communications, financial transactions, and medical records. It contrasts the traditional model, in which servers deliver code to browsers, with an approach intended to address trust in that delivery.
