Page for Unexpected Script Warning Dialog
Categories
(support.mozilla.org :: Knowledge Base Content, task)
Tracking
(Not tracked)
People
(Reporter: tjr, Assigned: ffloare)
References
Details
Content access restriction: Is the content restricted to staff or under embargo (yes or no)?
No
Product (ensure to select only one product for each ticket. If your request involves multiple products, file an individual Bugzilla for each)
Firefox for Desktop (Windows)
Firefox for Desktop (macOS)
Firefox for Desktop (Linux)
I know it says to submit a separate bugzilla ticket for each product, but aside from the screenshots appearing slightly different for each OS, the content of the page should be the same...
Select the type of request.
KB content update/ new content
I'm not sure if I also need an In-product link request though; I had been referencing the page using https://support.mozilla.org/kb/unexpected-script-load and supportPage: "unexpected-script-load"
Please summarize the request, emphasizing any user-facing changes. Include historical context or background information if it helps users understand the new features or changes.
We have been working on a security defense-in-depth feature for several years that prevents JavaScript that is not from Mozilla run running in privileged contexts inside Firefox. Through telemetry we have identified and addressed a lot of situations where this might occur, but there are a few remaining ones we do not understand. Specifically about 1000 users we know about via telemetry. (But we are concerned there may be other users who have disabled telemetry.)
We do not want to break these users workflows, but have been unable to understand how or why they have unexpected JavaScript running in a privileged context. We've decided the best thing to do is to warn the user and prompt them to (a) Allow or Block the JavaScript and (b) Opt-In to reporting the script URL to Mozilla so we can understand how and why it is happening.
The reporting mechanism is the driving force behind the dialog: if we get user reports we can understand why this is happening, and solve the problem for everyone. The long-term solution is not for users to block scripts via this dialog, but for us to address the underlying cause for everyone. (And then we would remove the dialog entirely.)
The SUMO page is to help users who encounter the dialog understand what it means.
Are the user-facing changes mentioned above for the production release, or is the feature/change experimental/ beta? (Production, Experimental or Beta) [REQUIRED]
The dialog will land in Nightly hopefully by Aug 12 and ride the trains to release. Nighty/Beta users will encounter the dialog, so it would be nice if the SUMO page was available to them.
Are the new features or changes region-specific? Are they going to be released in a gradual rollout? [REQUIRED]
No.
Please indicate if this is an on- or off-train release [REQUIRED]
On-train
What is the anticipated release date? [REQUIRED]
Nightly: Aug 13
Release: Sept 16
Does the content need to be published prior to the release date? If so, when? [REQUIRED]
Ideally it would be published when the dialog is in Nightly, to help those users if they click the Learn More link. Because it explains some UI in Firefox, it's unlikely to confuse Release users - they'd be looking at screenshots that don't match anything they'd be seeing.
Does the content need to be localized in any languages outside of EN-US? If yes, please indicate which languages. [REQUIRED]
Persian/Farsi
Please include any related JIRA/Github/Bugzilla tickets, documentation, demos or practical use cases. [REQUIRED]
Bug 1979341
Draft of the page: https://docs.google.com/document/d/1WVCMV9ARElp1NwgNLGduPdS-Mxahmx8sbrOpoVyzG5A/edit
Please include links to any design assets, visuals, figma files, etc. [REQUIRED]
See https://docs.google.com/document/d/1WVCMV9ARElp1NwgNLGduPdS-Mxahmx8sbrOpoVyzG5A/edit?tab=t.0
Please add instructions for testing that will enable us to replicate the expected product behavior. [REQUIRED]
I will need to provide a try build link - it can't be replicated in a stock Firefox build because we don't know how it happens...
Does the content need approval before publishing? If yes, identify the one approver responsible for this task.
No
Hey Tom, We definitely won't be able to have this ready by August 12th due to the short notice. We can get it out by 8/26-8/27. We can also arm forums folks with reactive coms if any questions arise. Does that work for you?
|
Reporter | |
Comment 2•8 months ago
|
||
Sure - I'm sorry, I would have given more notice if I was more familiar with the process
No worries at all! Thanks for being flexible if anything.
For awareness, we typically need 2 weeks for content creation and then another week for localization. So getting things to us at the top of the release cycle is needed for timely releases. Fortunately I think this feature is simple enough and we can rely on reactive messaging should questions arise.
Thanks again!
|
Assignee | |
Comment 4•8 months ago
|
||
I have written a draft here, based on your writing, Tom. Please review it when you have time!
|
|
Reporter | |
Comment 5•8 months ago
|
||
I had a few small suggestions, but overall this looks great, I'm super happy with it. Thank you!
|
|
Assignee | |
Comment 6•8 months ago
|
||
(In reply to Tom Ritter [:tjr] from comment #5)
I had a few small suggestions, but overall this looks great, I'm super happy with it. Thank you!
Tom, I forgot to ask. Aside from the suggestions (which I have added already), is the article good to go from your perspective? Thank you!
|
|
Assignee | |
Comment 8•8 months ago
|
||
KB here. Will close this bug.
|
||
Comment 9•8 months ago
•
|
||
Posted in the article discussion forum, https://support.mozilla.org/en-US/kb/unexpected-script-load/discuss/13920
I localized the article into Italian, but I'd also like to get the Italian image of the warning. I don't have permission to comment on the bug. Does anyone have any idea how to get the warning via a specific link?
|
||
Comment 10•8 months ago
|
||
Hi Tom,
If this article is linked from the product, I'd highly suggest requesting an in-product link by submitting a new content request, since this one has been completed. This will ensure that your team won't need to update the code if SUMO URL changes for whatever reason.
See https://support.mozilla.org/kb/a-guide-to-linking-to-support-articles
|
|
||
Comment 11•8 months ago
|
||
(from comment #0)
The dialog will land in Nightly hopefully by Aug 12 and ride the trains to release. Nighty/Beta users will encounter the dialog, so it would be nice if the SUMO page was available to them.
What is the anticipated release date? [REQUIRED]
Nightly: Aug 13
Release: Sept 16
Bug 1979341 was fixed in Firefox version 143, released Aug 19 in Firefox Beta.
I added "Starting in Firefox version 143" to the new Understand unexpected script warnings in Firefox article in a pending revision. Flavius, can you review? See https://support.mozilla.org/en-US/kb/unexpected-script-load/history
|
|
||
Comment 12•8 months ago
|
||
I got it, Alice.
Flavius, I hope you don't mind that I approved it, since it's an easy fix. Also, I'm removing the NI for Flavius.
Description
•