Firefox 25: Find out what is new

Martin Brinkmann
Oct 29, 2013
Updated • Oct 29, 2013
Firefox
|
22

Another 42 days have passed which means that Mozilla will release the final version of Firefox 25 today if everything goes along as planned.

Firefox 24.0 users will receive update notifications starting later today, provided that they have not blocked the web browser from updating automatically.

All other release channels, that is Beta, Aurora and Nightly, will also be moved up one version so that they will be updated to versions 26.0, 27.0 and 28.0 respectively over the course of the next days.

The release is as usually already available on Mozilla's FTP server from where it can be downloaded. It is usually not recommended though, as last minute changes may replace it with another build that is then distributed to all users of the browser.

If you want to be sure that you get the right update, wait until Mozilla officially announces the release of the new version.

Tip: You can check your version of Firefox with a tap on the Alt-key on your keyboard, and the selection of Help > About Firefox from the menu that opens up.

Firefox 25 What’s New

firefox 25 update

Firefox 25 ships with a handful of new features or changes only. The following list provides you with information about them.

Find Bar

firefox find bar

The Find Bar of the browser can be used to find text on web pages that you have open in the browser. Up until Firefox 24, the bar was shared between all tabs. If you opened it in one tab, it would also be visible in all other tabs.

From Firefox 25 on, this has changed so that the bar is only displayed in the tab it has been opened it.

While that is useful for some users who only want to search in a single tab, it breaks the workflow of users who have used the feature to search in multiple tabs (one after the other).

Mozilla has not implemented a switch or option to the browser to restore the old functionality, and it seems that the organization is not willed to do so citing that this is better left to add-on developers.

One of the first add-ons to implement the functionality is FindBar Tweaks which I have reviewed previously. You can use it to search across all open tabs in Firefox. An Alternative to that is the search add-on Hugo which provides similar capabilities.

Reset Firefox Notifications

reset firefox

I have already reported about this some days ago. If you are not using a Firefox profile for at least 60 days, you will receive a notification on the next start of the web browser that provides you with an option to reset the browser.

The idea behind the change is to make sure that users do not run into any "old" issues when they start Firefox. Resetting will also provide them with options to import another browser's browsing history and settings again into the Firefox browser.

It more or less resets the browser to a state where it was when you installed it for the first time on your system.

Related to that is that resetting the browser does not clear the active browsing session anymore. What this means is that websites and services that were open before the reset feature was invoked are available after the operation has been completed.

OCSP Stapling

firefox security ssl

While there has been no official confirmation yet about the implementation of OCSP Stapling in Firefox 25, the most recent information released by Mozilla indicated the organization's plan to release the feature in this version of Firefox.

It changes how certificates are verified for servers that support OCSP Stapling, and will fall back to the old way of verifying certificates if that is not the case.

The main change here is that the browser does not connect to a Certificate Authority (CA) server anymore to verify a server's certificate. Instead, the server itself checks with the CA regularly and that data is then submitted to the browser alongside the certificate itself.

The preference responsible for the feature, security.ssl.enable_ocsp_stapling,  seems to have been set to false though by default. You can enable it in the following way:

  • Type about:config into the browser's address bar
  • Confirm that you will be careful.
  • Search for security.ssl.enable_ocsp_stapling
  • Double-click the entry.

You can repeat the process to deactivate it again.

SSL False Start

A second security related feature has been implemented in Firefox 25. It is disabled by default as well and needs to be enabled in the following way:

  • Type about:config into the browser's address bar
  • Confirm that you will be careful.
  • Search for security.ssl.enable_false_start
  • Double-click the entry.

The feature aims to reduce the latency for certain handshakes.

This document specifies an optional behavior of TLS implementations, dubbed False Start. It affects only protocol timing, not on-the-wire protocol data, and can be implemented unilaterally. The TLS False Start feature leads to a latency reduction of one round trip for certain handshakes. [source]

Related to that is the preference security.ssl.false_start.require-forward-secrecy which is set to false by default. It only makes sense to enable it if you have set security.ssl.enable_false_start to true previously.

Perfect forward secrecy is a property of cryptographic systems which ensures that a session key derived from a set of public and private keys will not be compromised if one of the private keys is compromised in the future. [source]

The preference security.ssl.false_start.require-npn is enabled by default.

This document describes a Transport Layer Security (TLS) extension for application layer protocol negotiation. This allows the application layer to negotiate which protocol should be performed over the secure connection in a manner which avoids additional round trips and which is independent of the application layer protocols. [source]

Web Audio support

While you can play audio on the web without the need for plug-ins in the browser thanks to HTML5, the audio tag itself has severe limitations when it comes to operations that are complex.

Web Audio is a high level JavaScript API for processing and synthesizing audio on the web.

You can find out more about it on Mozilla Hacks where the benefits of the Web Audio API are listed from a game designer, audio engineer and programmer perspective.

Developer changes

Several changes have been made to the Developer Tools.

  • The Profiler has an option now to save and load profiling results.
  • A right-click menu was added to the Network panel. You can now use it to copy and resend url commands.
  • You can now "black box" script files in the Debugger.
  • Auto-completion was added to the Inspector for CSS values and names.

Other development related changes:

  • The background-attachment CSS property supports the local keyword now.
  • -moz-os-version is a new non-standard media query to determine the operating system version (currently only available on Windows).
  • -moz-osx-font-smoothing is now available.
  • You can now use the srcdoc attribute of iframes.
  • HTMLCanvasElement.toBlob now accepts an attribute defining the quality of the image when used with "image/jpeg".
  • Array.of() is now implemented on Array.
  • The methods Number.parseInt(), Number.parseFloat(), Map.prototype.forEach() and Set.prototype.forEach() have been implemented.
  • A boatload of new mathematical methods have been implemented.
  • Support for binary and octal integer literals has been added.
  • The Web Audio API is supported now.

Consult the source section below for detailed information about all development related changes in Firefox 25.

Firefox 25 for Android (new)

From this month on, we will also be looking at the changes that Mozilla made to the mobile version of Firefox. Currently, that means Firefox for Android only.

Three main new features have been added to the Android version of Firefox:

  • A new guest browsing mode has been added. This can be useful if someone else needs to use your phone's browser for a set amount of time. Guest browsing ensures that they do not get access to your browsing history, passwords or bookmarks, and that their browsing session will be deleted as well once they are finished using your mobile device.
  • Firefox Mobile supports mixed content blocking now to protect users of the browser from man-in-the-middle attacks and eavesdropping attacks on HTTPS pages.
  • Mobile add-ons can add indicators to the address bar of Firefox Mobile now.
  • Developers can enable remote debugging with a desktop version of Firefox now from the settings.
  • The new Contacts API has been implemented.

Security updates / fixes

MFSA 2013-102 Use-after-free in HTML document templates
MFSA 2013-101 Memory corruption in workers
MFSA 2013-100 Miscellaneous use-after-free issues found through ASAN fuzzing
MFSA 2013-99 Security bypass of PDF.js checks using iframes
MFSA 2013-98 Use-after-free when updating offline cache
MFSA 2013-97 Writing to cycle collected object during image decoding
MFSA 2013-96 Improperly initialized memory and overflows in some JavaScript functions
MFSA 2013-95 Access violation with XSLT and uninitialized data
MFSA 2013-94 Spoofing addressbar though SELECT element
MFSA 2013-93 Miscellaneous memory safety hazards (rv:25.0 / rv:24.1 / rv:17.0.10)

Additional information / sources

The following links point to official sources that provide you with additional information about the release. Note that some may not have been updated yet and that we will publish the final links once they become available.

  1. Add-on Compatibility for Firefox 25
  2. Firefox 25 for Developers
  3. Firefox 25 release notes
  4. Firefox 25 for Android release notes
  5. Security advisories for Firefox 25

Now read: How to download a full Firefox installer

Advertisement

Tutorials & Tips


Previous Post: «
Next Post: «

Comments

  1. Dave U said on November 8, 2013 at 1:32 am
    Reply

    Wasn’t this going to be the version that made customisation virtually impossible and dumbed down the UI so far that it’s practically Google Chrome? No addon bar, no custom toolbars, no toolbar button repositioning, no small icons, forced combine of certain standard toolbar buttons, one measly “navigational toolbar” for EVERY toolbar button created by all addons, disallowing “tabs on top”, etc. etc?

    I don’t see anything about this in the article so was that just a bad dream? Or did they get so much backlash that they decided to U-turn on the whole thing? I assume they U-turned after a major (and well deserved) user backlash. If that’s the case, do you think it’s prompted them to take customisation seriously again or do you think it’s just lip-service to shut us up while they surreptitiously continue to dumb it down, slowly but surely, whilst avoiding any big fanfare and the associated user backlash?

    I’d also like to hear your thoughts on the “Google issue”, if you wouldn’t mind. We all know that Google pay the bulk of Mozilla’s wages and the original “dumbing-down” rumours surrounding FF25 did somewhat hint that Google were paying Mozilla to deliberately hobble their browser in an effort to boost Google Chrome usage. Do you think there’s any truth to this? Might it still be a possibility, despite the fact that they seem to have failed to roll these changes out with FF25? I’d be very interested to get your opinion on all this, thanks very much.

    1. Martin Brinkmann said on November 8, 2013 at 8:53 am
      Reply

      The Australis design has been postponed, but it will come.

      1. Dave U said on November 8, 2013 at 10:03 pm
        Reply

        Thanks, looks like I’ll be sticking with 24ESR for the foreseeable future.

  2. Sergey said on October 30, 2013 at 11:05 pm
    Reply

    Time to update my FF @PC and Tablet.

  3. buggeer said on October 30, 2013 at 8:27 pm
    Reply

    Mozilla did an AMA on reddit. You may find some of the Q&A interesting http://www.reddit.com/r/IAmA/comments/1phhx1/we_are_mozilla_ask_us_anything/cd2cj76

  4. hessam said on October 30, 2013 at 2:47 pm
    Reply

    that too bad
    it changed to work like chrome

  5. AtOdds said on October 30, 2013 at 2:05 pm
    Reply

    Thanks for the warning. I’m going to block the update. I’m running out of browser options. Opera going Chrome. FF, my second place browser, going down the same path.

    1. buggeer said on October 30, 2013 at 8:28 pm
      Reply

      Try Palemoon fork. The main dev has set unbreaking the browser as his main goal.

  6. Dana said on October 30, 2013 at 2:03 am
    Reply

    I am really displeased with this update. I use Norton to store passwords, among other reasons. It said it was incompatible, but would start up again after installation. Then it says it still won’t work. I hate Chrome and internet explorer is slow and sometimes non-responsive. Now the only browser I have ever been happy with is about to be dumped for one I can’t stand. Way to go guys.

  7. Boris said on October 29, 2013 at 11:57 pm
    Reply

    None of findbar/statusbar extensions/scripts work now.

    1. Ron said on October 30, 2013 at 2:59 am
      Reply

      Use the latest ESR release 24.1, which contains the security/stability updates included in 25. The extensions/scripts that worked in 24.0 *should* work in 24.1 ESR.

      http://www.mozilla.org/en-US/firefox/organizations/all.html

  8. Anonymous said on October 29, 2013 at 11:56 pm
    Reply

    None of findbar/statusbar extensions/scripts work now.

  9. SAJAL JAIN said on October 29, 2013 at 6:58 pm
    Reply

    I HAVE ONLY ONE ISSUE . IS IT GOING TO BE COMPATIBLE WITH WINDOWS 64 BIT ,8.1.THE LATEST VERSION OF MICROSOFT WINDOWS OPERATING SYSTEM.

  10. miro said on October 29, 2013 at 6:13 pm
    Reply
  11. José said on October 29, 2013 at 4:55 pm
    Reply

    The third link links to the beta release notes. Remove “beta” in the URL to fix.

    1. Martin Brinkmann said on October 29, 2013 at 5:23 pm
      Reply

      I usually post the review when the final release notes are not available and replace them when they are. Since they are available now, I have replaced the links with the final release notes.

  12. Nhick said on October 29, 2013 at 1:37 pm
    Reply

    Waiting for the update.. can’t wait to see what’s new and how fast it can go..

  13. Ken Saunders said on October 29, 2013 at 11:01 am
    Reply

    Well done as always!
    Thanks, and not just for this article, but for all of them and for all of the time, effort, and work that you put in to provide us all with such a great service, and good, fair, trusted, and comprehensive content.

    It should be said occasionally.
    Kudos to Alan and Jack too.

    1. Martin Brinkmann said on October 29, 2013 at 11:06 am
      Reply

      Trying my best to stick out and provide useful information, unlike other sites that just copy the release notes.

      1. Ken Saunders said on October 29, 2013 at 4:27 pm
        Reply

        “unlike other sites that just copy the release notes.”
        Funny you should say that.
        http://thenextweb.com/insider/2013/10/29/can-download-firefox-25-windows-mac-linux-right-now-official-launch-tomorrow/

      2. Sleeping said on October 29, 2013 at 2:05 pm
        Reply

        Keep up the good work, guys :)

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.