Blog
News and other things I find interesting
RSS feeds and ATOM feeds
Mozilla platform development cheat sheet
Last modified: Thursday, October 06, 2011
Introducing: The Mozilla Platform Development Cheat Sheet.
Working on Firefox can be daunting when you first start as a developer.
There is an amazing amount of Mozilla specific technology you need to learn; in addition you may not have had the opportunity to work with things like mercurial patch queues (MQ).
On one hand: Mozilla has a massive collection of awesome Mozilla development specific documentation on the Mozilla Developer Network (MDN).
On the other hand: There is a massive collection of documentation that you have to keep looking up.
When I started as a platform developer at Mozilla 3 months ago, I started making a cheat sheet of common information I would have to frequently look up. I will continue to update this page as I continue to learn every day at Mozilla.
I highly encourage anyone looking to contribute to an open source project to look into contributing to Mozilla.
Not only will you be helping an open source non-profit organization, but you will also connect with extremely smart peers, have extra resume flair, and learn a ton. The experience of contributing (or working) for Mozilla will forever change you as a developer.
Tags: firefox mozilla development
Add a new comment | 3 comment(s)
|
Very nice, that looks handy. |
|
A few inaccuracies and typos: XUL, XLB should probably say XUL, XBL Since the switch to Mercurial, client.mk no longer pulls the tree, so just make -f client.mk suffices. Even with comm-central trunk I think you would need to explicitly use the checkout target. Don't cd mozilla when building from comm-central! --disable-static is not supported since Gecko 5. Tip: use make -C ../toolkit/library to avoid cd |
|
Neil, thanks! I fixed the build typos and made the other changes. |
Mozilla Firefox and silent updates
Last modified: Monday, October 03, 2011
Mozilla's rapid release process allows us to deliver features, speed optimizations, memory reductions, and much more... faster.
Keeping up to date fast is an essential need for the ever changing web.
There is a new release of Firefox every 6 weeks instead of every year. Even with this shortened release cycle, these releases still include major enhancements. These faster updates are possible because Mozilla is growing significantly, and the community of Mozillians at large is growing month over month.
The rapid release process has some very positive side effects, like delivering new web technologies faster, and attracting world class developers who like to see their code ship fast. But rapid releases also have some negative side effects.
One of the negative side effects is that minor annoyances with software updates suddenly become much more noticeable. Most users don't want to think about software updates nor version numbers and now they are being forced to do so every six weeks.
One such minor annoyance is User Account Control (UAC):
Starting with Windows Vista Microsoft introduced UAC, and with it users across the world see this familiar dialog when doing any operation that requires administrative access:

UAC in particular makes every process run with limited permissions, and if you want to do something like write into Program Files, then the user has to give permissions to the application to do this.
This makes things like automated software updates hard to do without user interaction. If we don't have access to write into Program Files to perform an update, then we have to ask for elevated permissions. We ask for elevated permissions today when applying updates.
If a user with administrative access gives permissions to Firefox one time via a UAC prompt, and that user has automatic updates on, then there is no reason we should continue to ask them to elevate the permissions each and every time we want to apply an update. The user has already explicitly given permission to do it.
If this worries you, just remember that you can change your mind at any time by configuring silent updates on the Options > Advanced > Update tab.
The feature page for this task is located here: Remove requirement for the Windows UAC dialog when applying an update. I am the lead developer on this UAC task and the estimated target is the first quarter of 2012.
What's being done to solve the UAC annoyance:
There are several ways to tackle this issue. For example, some browsers that offer silent software updates will install into the user's application data folder and hence do not have this problem. We could do the same, but we chose not to because it can be an administrative headache for some people who manage updates themselves and have to maintain an installation for every user.
We are currently experimenting with a Windows service approach.
This means that an optional component will be installed that automates the software update process better without giving UAC prompts.
Only one Firefox service:
There are four different Firefox development channels you can use. At any time there is a Firefox Release channel, Beta channel, Aurora channel, and Nightly builds channel. These channels give you access to Firefox releases at different stages of the development cycle.
A user can have multiple installations across channels, but only one Firefox service will exist in Windows Services.
Firefox service as an optional component:
The Firefox service will be an optional component. It doesn't need to be installed, and if it is stopped or disabled, updates will work as they did before in every other recent Firefox release.
A user can also uninstall the Firefox service at any time. Updates will continue to occur using the old method.
Other uses of the Firefox service:
Having a Windows service installed means that we can investigate other integration and maintenance points. The possibilities are very exciting.
The Windows service may be used later on for a wider selection of maintenance related things including faster browser startup via prefetching, but initially will be only for software updates.
High level overview of other new Silent update features
Above I mostly talked about silent updates on Windows, but there are other update issues being addressed in several new features across all platforms. This section was originally written by Robert Strong with help from Chris Lee, and Lawrence Mandel and describes these features.
All of the silent update work can be tracked on the wiki.
-
Lessen how often the "What’s New" page is shown
Estimated target: fourth quarter of 2011.
Every six weeks Firefox informs you of what is new in the release. The feedback from our users is that the information is not required and is actually an irritant. We are looking at ways of displaying information only when it provides benefit. The ability to control if the "What’s New" page should be displayed after an update was added to Firefox 4. The server side capability should be completed soon. -
Lessen how often the update user interface is displayed
Estimated target: first quarter of 2012.
After an update is downloaded in the background Firefox waits 12 hours before notifying the user to restart to apply the update and since this can interrupt tasks the wait time is being increased to 24 hours. More details including how we decided upon 24 hours are available on this feature page and the bugs referenced on that page. -
Add-ons Default to Compatible
Estimated target: first quarter of 2012.
By default, Firefox requires consent to update if there are add-ons that are enabled and compatible with the current version of Firefox and are incompatible with the update’s version. With this feature there should be significantly fewer cases where consent is required to update Firefox while keeping your add-ons installed and up-to-date as well. -
Apply updates on shutdown
Estimated target: to be determined.
After an update is downloaded users notice that it takes longer to start up Firefox on the next run. This wait time is due to the installation of the software update. To eliminate the wait time on startup to apply an update the majority of an update’s operations will be performed prior to shutdown and the few remaining operations will be performed after Firefox has exited. This applies to all desktop platforms though on Windows the service that will remove the requirement for the Windows UAC dialog will typically apply the update. -
Improved process flow for updating when there are incompatible add-ons
Estimated target: to be determined.
If an update is declined when there are incompatible add-ons the time to wait until next notification will be increased. This feature is in the planning stage and the amount of time to wait until the next notification hasn’t been decided as of yet.
Other Mozilla products:
Other Mozilla products may use the service described above. We currently plan to have only one Windows service across all products. All supported architectures are also planned to share the same Windows service.
Every feature described in this post either applies to or can be done for other Mozilla based applications such as SeaMonkey, Thunderbird, and SongBird.
Platform Integration team:
Mozilla started a new Platform Integration team which focuses on issues which need Operating System specific solutions.
I am a member of this new team led by Robert Strong. Some of the tasks being worked on by this team are described above.
Tags: mozilla uac firefox windows
Add a new comment | 37 comment(s)
|
The service is a good solution, but an small advice, Windows permit to add services with different ACLs, for example you can define that it can be started by any user. I did a long time ago an application updater, that worked this way. 1) The application executable downloaded the update files this way the Updater Service is not a long running process, It only runs when the update is being applied |
|
Thanks for the detailed post. It's a shame these things couldn't be taken care of earlier, but I'm very glad to se it happening now. |
|
Can I ask why the service is always running? Could it not be demand start? |
|
Faster launch via prefetching? That sounds suspiciously like those processes Java, Open Office and a million other applications sneakily install to slow down your OS boot (because no one will ever notice that, right, and if they do, they'll just blame Microsoft instead of us), in order to marginally speed up "our" software. Please think thrice before embarking on something like that. It's possible that it could be pulled off without actually slowing down other parts of the OS, but on the surface of it, it sounds like a great way to get binned with Java and all the other crapware that stealthily makes Windows suck just to make their own software load marginally faster. |
|
Thanks for the excellent ideas and comments. Re: Starting the service on demand. That sounds like a great idea and I'll look into doing this. Re jalf on prefetch bloat: Other uses of the service is purely speculative right now and slowing down the system is the absolute last thing we'd ever let ship in the product. Thanks for the insight though, it's appreciated. The thing I wanted to try in particular was loading the DLLs that we're already loading for the service via memory from the app instead of from disk. So a custom built LoadLibrary that works from memory instead of disk. |
|
Actually I've never saw this mechanism behaving like described when I boot into Windows 7. |
|
We will only ask for elevation right now when the user installs into a protected directory that requires elevated permissions like Program Files. Most users install into Program Files today, but if you don't you will not see those prompts. |
|
Update prompts are also worse because of another bug: it will warn you not only if addons *become* incompatible, but also when they *remain* incompatible. So most users will see a warning that several Java Console extensions are incompatible, even though they've been incompatible for ages. |
|
You can also look into what Chrome currently does. They use Windows Scheduler to schedule their update app to run at predefined periods of time. Though it's not ideal either, it's still better than a constantly running service. With sneaky changes like running services and requiring special permissions on mobile(*), FF is rapidly charging into the spayware land. |
|
Thanks for the suggestion Walter, but I don't think it will apply to Firefox. Chrome was mentioned above about how other software does software updates, but it does not apply to us because we install by default into Program Files unlike Chrome. I wouldn't call this a sneaky change as it is a public change, and it is optional. Our intent is only to not annoy users, Mozilla is non-profit organization and the one web browser on the Internet that you can trust above all others. |
|
You've probably already thought of this, but for the update-on-shutdown bit it might be worth it to see if you get any notifications if the whole session is going away (i.e. logout / reboot / poweroff) and avoid it in that case. Having to wait for things as you leave is probably more aggravating... |
|
Mook: Absolutely, good eye. That's on the list already and probably one of the harder parts of that task. |
|
Looks like a great slate of work -- I'm happy to see the UAC prompt finally go away! Random comment on updating on shutdown... It might be interesting to look at ways of applying most of the update _while_ you're running (eg to an inactive staging directory), so that there's just minimal work left to actually apply the update. Then it doesn't really matter if that's done on launch or shutdown, because it would be extremely fast. |
|
Hello. Do you know why Firefox is installed into %userprofile%\Documents\ if the user has no admin-rights (example: on machines at works, the users are no admin)? Is it normal? What about this behaviour and the new Windows service feature? |
|
As always, take care of security issues. Having a new service running is a new door for attackers. |
|
Yeah, faster updates, new releases, new this and that .... sounds great, but .... f.e what about good testings ? What about bugs and why is it necessary to speed up the development ? I´ve enough to work, so i won´t have a new (or only updated) software every few weeks to install, learn what´s new and so on and so on. If every company speed up their release cycles, where shall it go ? More and more things, that changes in shorter and shorter times ? And if the peoples = users can´t get through, sometimes they need to sleep :-), what then ? Speed up things isn´t a good solution. regards |
|
If you are thinking about other uses of this service, try to name it differently. |
|
It's great news that the UAC dialog is finally going away. Thank you! Is there already a project under way for fixing the analogous problem for Mac? Updates don't work smoothly on Mac due to file permissions if Firefox is run by a user who isn't the user who installed Firefox. |
|
> "It might be interesting to look at ways of applying most of the update _while_ you're running" Yup we're talking about this already, thanks for the suggestion. > "Do you know why Firefox is installed into %userprofile%\Documents" I think it will apply there if you install as a limited user account. > "As always, take care of security issues." We will be scheduling a security review this week on the project to ensure we're on the right track and that we're thinking of everything. > what about good testing ? ... I personally believe that the new development channels that we have will ensure a more stable product. More users are using the pre-releases for longer periods of time now who accept that it's not a final release and may have some issues. |
|
> The Windows scheduler cannot be used to automatically gain elevated permissions. This is not correct from what I understand. Scheduled tasks may run with elevation, see http://www.winhelponline.com/blog/run-programs-elevated-without-getting-the-uac-prompt/ for an example or the description of the "Run with highest privileges" option in TechNet (http://technet.microsoft.com/en-us/library/cc722152.aspx) If you made your decision to implement an update service based on the assumption that this was the only way to bypass the UAC prompt, then I'd be glad if you reconsider that decision. Anything that does not rely on yet another update service permanently up and running with full privileges will be much better. |
|
> If you are thinking about other uses of this service, try to name it differently. The name is very much an open question still and won't be as I mentioned above. > Is there already a project under way for fixing the analogous problem for Mac? Please post to https://bugzilla.mozilla.org/enter_bug.cgi?product=Toolkit in the component Application Update to ensure. > ... Scheduled tasks may run with elevation ... Right I didn't say they can't run elevated, just that they can't be used as a trick to run elevated for unelevated processes. > Anything that does not rely on yet another update service permanently up and running with full privileges will be much better. I think we'll only start it when needed and shut it down again right, so it will have no overhead on system performance. |
|
>> "I think it will apply there if you install as a limited user account." Thanks for replying. Don’t you think it's a "largesse" that takes Firefox with the limited Windows user account? Does not Firefox stop the install in such a case? |
|
Concerning starting the Update service on demand (via Task Scheduler): that is how Google's Update Service does it, and it works really well. I would very much prefer this solution over a prcoess running all the time. |
|
> Does not Firefox stop the install in such a case I have never tried it myself but I've heard that it's allowed. |
|
I wonder if and how you ever will make firefox fit into a company's infrastructure. AFAIK there is no real support to deploy FF in an ADS-environment. Same being true for centralized management via GPO. Till some point we were ready to accept all this, but re-installing/patching every 6 weeks in a managed network (i. e. no user ever has an account with admin privs) is simply a waste of time and money. My boss is thinking of switching to chrome, because in his view chrome suits the needs of our it budget. If somehow, someday MS is to make an reasonable secure browser, company it stuff will gladly skip any third party browser. |
|
> I wonder if and how you ever will make firefox fit into a company's infrastructure I think this article may be of interest to you: https://wiki.mozilla.org/Enterprise/Firefox/ExtendedSupport:Proposal |
|
If there is one thing that would get me to drop Fire Fox completely, it would be forced updates. I like fire Fox but I detest the every 6 week updates and the resulting loss of crucial add-ons. I updated to FF 7.1 and lost the ability to reach several websites. Luckily. I still had the 6.0 DMG and was able to reinstall. I will not accept forced updates. |
|
Please enable this as soon as possible. It will protect the majority of layman users and more technical have a option to turn it off so it is a win win situation. |
|
Ahh, not one more boot service please. Would it be possible to integrate with, for example, Google Update Service instead? |
|
> I will not accept forced updates. You can configure updates in the Options. > Ahh, not one more boot service please It will not be a boot service, it will be an on demand service. |
|
Will the enterprise version be available to consumers? I really detest this rapid update cycle. I think once a year is plenty often for Fx to upgrade to a new version. I've been using Mozilla browser from 2001 and then Phoenix, Firebird, Firefox and this is the worst change I have seen in all these years. I very much want to use the Enterprise version. I want to be able to use the Enterprise version although even with it the upgrades are too frequent but a lot more sensible than with the consumer version. |
|
> Mele20: The updates tab in Options is probably your best bet you can turn off checking for updates there. |
|
Yes! A service-based update model will allow co-existence of updating and sandboxing on end-user machines. I prefer to set up friends' WinXP computers with Firefox (because XP does not have the half-decent IE9) and Thunderbird (to avoid migration issues between some of the MS email clients), but also with Sandboxie. At the moment this means having to turn off automatic updates, and give the end-users precise instructions for manual updates (shut down the sandboxed programs, open them normally, and manually trigger the updates). Roll on Q1 2012. |
|
I absolutely needs some extensions (not in AMO) and do not accept to update if they are not compatible to the new release. |
|
> So I don't wish to have an automatic update without my control ! You can configure this to do everything you want already, and in the future via the preferences. |
|
>> ... Scheduled tasks may run with elevation ... > Right I didn't say they can't run elevated, just that they can't be used as a trick to run elevated for unelevated processes. It's not a way for a process to auto-elevate itself, that's right. But nonetheless you should take a look at the schtasks.exe utility coming with Windows Vista and 7. It's able to start a previously defined elevated task from an unelevated process. |
|
Brian- |
Windows 8 and Thunderbird first looks
Last modified: Thursday, September 15, 2011
I just wanted to post a quick follow up to my Firefox on Windows 8 post on how Thunderbird works with screenshots.
As with Firefox and other applications, as soon as you install Thunderbird it shows up as a Tile in the metro interface.
Clicking on it exits the tablet metro interface and goes into the old interface and launches Thunderbird.
One important thing is that if you click on a mailto: link in Internet Explorer it won't launch the default mail client. Instead it prompts with this error:
Windows Internet Explorer
Could not perform this operation because the default mail client is not properly installed.
Here's a screenshot of that error message:
I assume once this registration problem is fixed it'll launch the Desktop mode and then launch the email client. It would be nice to have a metro interface for Thunderbird as well.
Perhaps even a metro style compose email window application only for when a user is browsing in tablet full screen mode and they click to send an email with their default email client.
Related Bug:
- Bug 686836 - Launching default email client in Windows 8 results in error
Tags: thunderbird windows mozilla windows8
Add a new commentWindows 8 and Firefox first looks
Last modified: Thursday, September 15, 2011
As you probably already know, Windows 8 introduces the new default Tablet interface, and the old normal Desktop interface. It uses the new tablet interface as the startup interface even on Desktops though. For a good rundown on all of the new features, see here.
When you first boot up into Windows 8, it takes you briefly for about 1/2 of a second to the desktop interface and then switches directly to the tablet interface. I had read previously that the desktop/explorer process was only loaded into memory if you clicked it, but it seems to not be the case for this early pre-beta release.
The next thing you notice is that once in the Desktop interface, the start menu button no longer brings up a menu. It brings you back to the tablet interface. Pressing the Start/Windows keyboard button will take you between the 2 interfaces.
Firefox on Windows 8:
The first thing I did was install Firefox.
After installing Firefox, Windows will ask you which web browser you would like to use by default. It shows you a picture of Firefox and IE and lets you pick. Nice interface. It shows you this dialog even before our process starts. If you change focus to another tab or application though, the dialog goes away forever unless you uninstall and reinstall Firefox.
After installing we show automatically into the tablet interface as a new tile.
But when you click on the Firefox icon in the tablet interface, it takes you directly to the old Desktop environment and loads the Firefox process as normal. I think it'll be possible for integration like IE does into the tablet interface direclty. Although the solution may have to be 'creative'.
Full screen mode in Firefox works the same as previous versions currently. If you start in full screen it will switch you first to the Desktop mode, and then launch full screen. Exiting full screen leaves you at the Desktop interface.
Internet Explorer Tablet Mode:
If you start Internet Explorer from the tablet mode you'll see a full screen app with no switch to Desktop. It has a nice interface and allows you to pin any web page to your Tablet interface as a tile.
The problem with this is that even know I set Firefox as my default browser, through the Windows interface, it still launches IE for these shortcut tiles.
Here is a tile created on the far left from a pinned page in IE of the mozilla.org page:
Work to be done for Firefox on Windows 8:
There's probably a ton, but here are a few things that come to mind:
- We need to support the VS2011 developer tools for MozillaBuild
- It would be nice to not need to switch to Desktop to launch the browser.
- Platform integration for apps seems very important. We should be showing up as tiles for web applications that launch Firefox full screen.
- The Firefox tile can be leveraged to have more functionality built into it.
Related bugs:
- Bug 686835 - Investigate using XPCOM in a metro style application, and providing Firefox as a Metro app
- Bug 686837 - Add VS2011 support for mozilla-build
- Bug 686839 - Investigate Windows 8 metro tile integration
- Bug 686840 - Investigate the ability to toggle between a metro app and a native app
Tags: windows firefox mozilla windows8
Add a new comment | 2 comment(s)
|
firefox not working as in current win 8. Ucant access options panel by touch, also drop down list not working by touch. |
|
i am using windows 8 |
Review of The Book of CSS3 by Peter Gasston
Last modified: Monday, August 08, 2011
★★★★★ (5 stars out of 5)
When I previously thought about CSS I would only think about:
- selectors, or selector hierarchies, and
- properties related to those selectors
Although both are covered in detail in this book, the book really helped me discover things I had no idea I didn't know about CSS. The book does a great job of not explaining fundamentals of CSS and focuses instead on what's new in CSS3.
Media queries in particular was great to know about for making your website capable on mobile devices.
After reading its chapter I immediately implemented media queries on my blog.
I really liked how this book was organized, the first part deals with the CSS3 features that are already implemented in major browsers, followed by the parts which are partially implemented, and finally the things which are not yet implemented or agreed upon and are likely to change.
Every chapter ends with each major browser and the support it has for the features discussed in the chapter.
Other features like opacity, RGBA & HSL & HSLA colors, drop shadows, rounded corners, and much more were great to know about.
Several tips are provided for working with older browsers in a sane manner throughout the book for just about each section.
My only criticism in this book is that it would have been ideal to know not what is expected in IE9 but what is actually in IE9. IE9 was released March 14th,2011 this book was released in April, 2011. I can understand though that this would have delayed the release of the book.
Update: The author Peter Gasston has up-to-date information on the website which supports the book.
|
Thanks for your very kind review, Brian. I too would have liked to have included the final release of IE9 in my book, but every delay could mean that another part of the book would become slightly outdated. If it were up to me I would have kept on revising it, but the publisher insisted we set a cut-off point! I've got more up-to-date information on the website which supports the book, http://thebookofcss3.com, which I hope is an acceptable compromise. |