Suppress Firefox/Firebug SHA-1 warning - firefox

I use Firebug for web development. Since version Firefox 37 I see the following annoying message in my console:
This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1"
I understand that it is an important message, but it is duplicated many times and makes my work almost impossible.
Moreover, it appears every time my page communicates with other pages, for example with Google Analytics and other counters. So if I were to update my certificate, this message would still appear because these sites would have SHA-1.
So any site with GA gives me trouble.
How can I disable or filter this message?

As stated in the Firebug discussion group, Firebug's Console panel currently (Firebug 2.x) cannot filter single messages out. You can only filter by messages matching a specific text using the search field.
There are enhancement requests like issue #4507 reported to add such a filter, though it is unlikely that this will get implemented in Firebug, especially not in version 2.x, directly.
Firebug 3 will integrate into the built-in DevTools, which allow you to filter those warnings by unchecking Warnings within the Security menu inside the Console panel:
Besides that I created bug 1170476 asking to reduce the messages to a minimum.
Update:
Firebug development is discontinued. Instead, there is a Firebug theme available within the Firefox DevTools starting from Firefox 48. Bug 1170476 is fixed since Firefox 42, so you will only see one message logged with a counter showing how often the message occurred.

you can get rid of the message, but you have to modify firebugs code.
Sorry forgot to mention you need to convert the .xpi to .zip and extract the files first. You can leave the folder as is when done or zip it and convert it to an xpi again. You will need to restart Firefox.
locate the pluggin in your firefox profile dirctor and go to this file "\extensions\firebug#software.joehewitt.com\content\firebug\console\errors.js".
search for "logScriptError: function(context, object, isWarning)".
After the code "var error = new ErrorMessageObj(object.errorMessage, object.sourceName, object.lineNumber, object.sourceLine, category, context, null);".
input the following code:
if(error.message.indexOf('SHA-1') != -1 || error.message.indexOf('Security Policy') != -1){
return false;
}
should be about line 330.

Select the Console tab and, keeping pressed Ctrl on the keyboard, click on Errors, Info, Debug Info, Cookies.
Bear in mind that this will disable the output of all the warnings logged in Firebug and not only the ones generated by googleapis.

Remove HTTPS from the URL or keep all resources local.

Related

Firefox Dev-Tools - console not showing HTML-preview of XHR-Request anymore

I'm using the latest FF (108.0.1)
In the developer tools, when I submit an XHR-Request, I used to see the request's HTML-Rendering in the «Answer»-Tab of the console. This stopped working like 2 or 3 versions ago.
Now all I get is a blank page. If I switch to «unformatted» it shows the HTML-Code of the response.
When I use the «Network»-Tab, I do see the HTML Response. But the interaction with the result doesn't work anymore.
Explanation: I'm using Typo3's DebuggerUtility::var_dump() which creates a nice rendering of objects and arrays. I used to be able to expand the entries with a «plus»-sign, in the HTML-View of the console. Which is very handy. This is not working when I use the Network-Tab of the Dev-Tools.
Any ideas how to get that functionality back?
This bug got fixed a few days ago. That means it is working again in Firefox 110.
Though note that JavaScript was never executed in that preview because of security reasons, as far as I can tell. The output is pure HTML plus CSS like in your screenshot of the Response tab in the Network panel saying that JavaScript needs to be enabled.
So, the toggle there may only work if it is using a browser internal feature like the <summary> and <details> elements.

How to prevent Firebug 2 spewing out SHA-1 certificate warnings in the console [duplicate]

I use Firebug for web development. Since version Firefox 37 I see the following annoying message in my console:
This site makes use of a SHA-1 Certificate; it's recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1"
I understand that it is an important message, but it is duplicated many times and makes my work almost impossible.
Moreover, it appears every time my page communicates with other pages, for example with Google Analytics and other counters. So if I were to update my certificate, this message would still appear because these sites would have SHA-1.
So any site with GA gives me trouble.
How can I disable or filter this message?
As stated in the Firebug discussion group, Firebug's Console panel currently (Firebug 2.x) cannot filter single messages out. You can only filter by messages matching a specific text using the search field.
There are enhancement requests like issue #4507 reported to add such a filter, though it is unlikely that this will get implemented in Firebug, especially not in version 2.x, directly.
Firebug 3 will integrate into the built-in DevTools, which allow you to filter those warnings by unchecking Warnings within the Security menu inside the Console panel:
Besides that I created bug 1170476 asking to reduce the messages to a minimum.
Update:
Firebug development is discontinued. Instead, there is a Firebug theme available within the Firefox DevTools starting from Firefox 48. Bug 1170476 is fixed since Firefox 42, so you will only see one message logged with a counter showing how often the message occurred.
you can get rid of the message, but you have to modify firebugs code.
Sorry forgot to mention you need to convert the .xpi to .zip and extract the files first. You can leave the folder as is when done or zip it and convert it to an xpi again. You will need to restart Firefox.
locate the pluggin in your firefox profile dirctor and go to this file "\extensions\firebug#software.joehewitt.com\content\firebug\console\errors.js".
search for "logScriptError: function(context, object, isWarning)".
After the code "var error = new ErrorMessageObj(object.errorMessage, object.sourceName, object.lineNumber, object.sourceLine, category, context, null);".
input the following code:
if(error.message.indexOf('SHA-1') != -1 || error.message.indexOf('Security Policy') != -1){
return false;
}
should be about line 330.
Select the Console tab and, keeping pressed Ctrl on the keyboard, click on Errors, Info, Debug Info, Cookies.
Bear in mind that this will disable the output of all the warnings logged in Firebug and not only the ones generated by googleapis.
Remove HTTPS from the URL or keep all resources local.

Disable logs for specific file, firebug

I'm trying to debug a small piece of functionality, however the firebug console is giving me lots of logs from different files and I don't care about those at all.
Is there a way to tell firebug to ignore logs/warning/errors from chosen files?
There is currently no way to do so in Firebug, but there is already an issue filed, which requests this feature.
It's still unclear how the UI should look like, so you can make a suggestion there.
Sebastian
I am not sure about firebug but you can do that in Google Chrome. In the 'Inspect Elements' window right click on any line that you don't like to be logged, there will be menu with 'Filter' option and you can choose the file to filter for logging.

console.log not showing in my firebug

In jsfiddle.net, I have this simple code:
console.log('yep');
alert('hello');
I can see the alert window but nothing in my firebug console.
Is there a reason why ?
I'm encountering it as well on my FF15.
In my case, it is caused by the built-in "web console" in "web developer"
Ctrl+Shift+K
https://developer.mozilla.org/en-US/docs/Tools/Web_Console
Beginning with Firefox 4, the old Error Console has been deprecated in favor of the new, improved Web Console. The Web Console is something of a heads-up display for the web, letting you view error messages and other logged information. In addition, there are methods you can call to output information to the console, making it a useful debugging aid, and you can evaluate JavaScript on the fly.
I'm new to using console.log (I used to use alert()s) and was wondering why I couldn't see console.log messages in Firebug too.
After a several minutes of web searching I realised the console mode was set to 'Debug Info'. Clicking the 'All' button made all my messages appear.
The OP didn't make this particular mistake, admittedly. It's a rookie error, but still non-obvious enough (I haven't used Firebug for a while) to bring me here before I managed to figure it out.
This issue has been fixed in Firebug 1.11.0a5. More info is here
I just had the same issue with firefox 29 Beta (and Australis) Just restart the browser :)
EDIT : seems like its it's not true : on the first page load, it display the log, on the others not (need to open the page in a new tab). Apparently it's queryLoader2 jQuery plugin

Is There a Quick Way to Make Firefox Open a Page Without Loading Scripts Or Images?

I'm currently working on a method to automatically identify certain types of spam. My research for this is causing me to run into a ton of phishing attempts and nasty, nasty porn. Adding a website I'm about to open to the images exception list in Firefox preferences is a lengthy process. Is there a quick way (perhaps through a plugin) for me to signify I want to open a page without loading any of its scripts or images?
You can use Adblock Plus and add a filter like *$domain=yahoo.com - any web page from yahoo.com won't be allowed to load anything then. If you want to automate this task, this filter can also be added by running the following code from a privileged context, e.g. from the Error Console:
Components.utils.import("chrome://adblockplus-modules/content/Public.jsm", null)
.AdblockPlus.addPatterns(["*$domain=yahoo.com"]);
And removed by running:
Components.utils.import("chrome://adblockplus-modules/content/Public.jsm", null)
.AdblockPlus.removePatterns(["*$domain=yahoo.com"]);
Documentation of the public API of Adblock Plus: https://adblockplus.org/en/IAdblockPlus (I simplified the way this API is accessed because I assume that compatibility with old Adblock Plus versions and Firefox versions before Firefox 4 is irrelevant here).

Resources