Mozilla explains Firefox’s plan to ship JPEG XL using the Rust-based jxl-rs decoder, reducing the security and maintenance risks of the previous C++ implementation. The post compares JPEG XL with AVIF across compression quality, lossless encoding, and progressive rendering, offering guidance for choosing formats.
Mozilla engineering blog
This technical companion to the Distilled update digs into the problem space, the proposed design, and the remaining open problems. It focuses on keeping the web open and private in the bot era, especially around anonymous credentials and privacy-preserving browsers.
Support for Web Serial is now available in Firefox 151 for Desktop, letting web apps communicate directly with compatible serial-connected hardware like microcontrollers, 3D printers, and power meters. The post also covers security and privacy controls, enterprise policy defaults, and examples such as CircuitPython, Home Assistant, and Firefox Profiler integration.
Mozilla describes how it used Claude Mythos Preview and other AI models to find and fix a large number of latent security bugs in Firefox. The post explains the evolution of its security-hunting harness, the kinds of bugs it uncovered, and how this pipeline is being integrated into ongoing hardening work.
Mozilla introduces WAICT, a framework for binding web app code to publicly logged manifests so browsers can enforce integrity and transparency. The post frames this as a way to make client-side code more trustworthy for sensitive applications like encrypted messaging and video calls.
Mozilla announces RPM packages for Firefox Beta, extending the packaging approach previously introduced for Nightly. The post gives installation instructions for Fedora, openSUSE, and other RPM-based distributions and highlights performance, update, and security benefits.
This post is an expanded version of a presentation given at the 2025 WebAssembly CG meeting in Munich. It discusses WebAssembly’s evolution since 2017 and its fit for low-level languages like C and C++.
Firefox 148 ships the standardized Sanitizer API, giving developers a safer way to sanitize untrusted HTML before inserting it into the DOM. The post explains how this improves protection against cross-site scripting (XSS).
Interop 2026 is a cross-browser effort to improve compatibility in areas that matter most to users and developers. The initiative focuses on well-specified features with strong test coverage across major browser vendors.
Firefox is now the first browser to offer fast and comprehensive certificate revocation checking without revealing browsing activity. The post explains how CRLite improves TLS security while preserving privacy.
Firefox will offer an alternative to DLL injection for enterprise DLP deployments starting in version 138. The post discusses how this change improves stability in managed enterprise environments.
Interop 2025 continues the effort to improve cross-browser consistency after 2024’s strong interoperability gains. This year’s focus areas include WebRTC, Storage Access API, and CSS Zoom.
Mozilla and Filament introduced Uniffi for React Native, enabling developers to use Rust’s safety and performance advantages in cross-platform apps. The tool targets React Native Turbo Modules.
This release introduces a new command-line chat interface, performance improvements, and support for powerful models in Llamafile. It highlights Mozilla’s open-source AI tool for running LLMs locally.
0Din is a bug bounty program focused on securing GenAI systems and related technologies. The post explains how the program works and how people can participate in improving AI safety.
Puppeteer now has first-class support for Firefox starting with version 23. This makes it easier to automate browsers and run end-to-end tests across Chrome and Firefox.
The post explores snapshot fuzzing as a tool for finding vulnerabilities in Firefox IPC interfaces. It emphasizes the importance of process separation in the browser security model.
Mozilla Builders is sponsoring sqlite-vec, a project that adds vector search to SQLite. The work is aimed at making it easier to build Local AI applications with embedded vector search.
Firefox 130 introduces an experimental on-device AI model that can generate alt text for images. The feature is currently part of the built-in PDF editor and is intended to help screen reader users.
Mozilla shares early community momentum and contributor activity around the llamafile project. The update highlights open-source AI adoption and growing engagement on GitHub and Discord.