Closed Bug 1747596 Opened 3 years ago Closed 3 years ago

Separate search bar should be default

Categories

(Firefox :: Address Bar, defect)

Product:
Firefox
Component:
Address Bar
Version:
Firefox 95
Type:
defect

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: jake, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0

Steps to reproduce:

Installed Firefox on new user account on laptop with decent screen size.

Actual results:

There was no separate search bar.

Expected results:

It should be made clear to users the difference between a URL and a search term.

Google has dispensed with that because they are trying to make money by pulling the wool over people's eyes.

I thought you were better than that. If you are not, then there is no hope for humanity.

There is also a possible attack vector via the 'combined' [sick] search/URL box, if you think about it - since it appears you consider human stupidity as possible attack vectors.

  • Lots of people, including me personally, prefer a separate search box. Not a majority, according to user research and our product designers
  • That option is available in our search preference settings
  • That's not why Chrome has done that
  • There's nothing about this bug that needs to be hidden -- these choices are very public
Group: firefox-core-security

The Bugbug bot thinks this bug should belong to the 'Firefox::Address Bar' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Component: Untriaged → Address Bar

Sorry, but we think our current default is right for most users.

Status: UNCONFIRMED → RESOLVED
Closed: 3 years ago
Resolution: --- → WONTFIX

Sorry, but we think our current default is right for most users.

Right in what sense?

  • To be easy to use?
  • To protect users from malicious links?

Firefox have been party to changes to Firefox and W3C standards to protect users from XSS attacks.

But I would content that failing to educate users, and failing to show users the actual URL they are visiting, is the biggest XSS vector of them all.

Please fix it, and re-open this bug.

<del>content</del> <ins>contend</ins>

There's nothing about this bug that needs to be hidden -- these choices are very public

Sorry, I ticked the wrong box.

You need to log in before you can comment on or make changes to this bug.