Security News > 2021 > July > Firefox 90 Adds Cross-Origin Protections, Advanced Tracker Blocker

Firefox 90 Adds Cross-Origin Protections, Advanced Tracker Blocker
2021-07-13 17:12

Mozilla this week pushed Firefox 90 to the stable channel with several security improvements, including better protections against cross-origin threats and an advanced tracker blocking mechanism.

The open-source browser refresh is currently rolling out with support for Fetch Metadata Request Headers, which means that web applications can better protect users against cross-site request forgery, cross-site leaks, and speculative cross-site execution side channel attacks.

Firefox 90 also arrives with a new version of SmartBlock, the tracker blocking mechanism that Firefox Private Browsing and Strict Mode offer.

In addition to these new security features, Firefox 90 brings patches for a total of 9 vulnerabilities, including five rated high severity and four medium risk.

In a separate advisory, the U.S. Cybersecurity and Infrastructure Security Agency urged both users and system administrators to review Firefox 90's release notes and update to the new browser release as necessary.

"Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system," CISA notes.


News URL

http://feedproxy.google.com/~r/securityweek/~3/hyM1MW_fQGs/firefox-90-adds-cross-origin-protections-advanced-tracker-blocker