this post was submitted on 19 Jul 2025
14 points (100.0% liked)

Firefox

0 readers
24 users here now

The latest news and developments on Firefox and Mozilla, a global non-profit that strives to promote openness, innovation and opportunity on the web.

You can subscribe to this community from any Kbin or Lemmy instance:

Related

Rules

While we are not an official Mozilla community, we have adopted the Mozilla Community Participation Guidelines as far as it can be applied to a bin.

Rules

  1. Always be civil and respectful
    Don't be toxic, hostile, or a troll, especially towards Mozilla employees. This includes gratuitous use of profanity.

  2. Don't be a bigot
    No form of bigotry will be tolerated.

  3. Don't post security compromising suggestions
    If you do, include an obvious and clear warning.

  4. Don't post conspiracy theories
    Especially ones about nefarious intentions or funding. If you're concerned: Ask. Please don’t fuel conspiracy thinking here. Don’t try to spread FUD, especially against reliable privacy-enhancing software. Extraordinary claims require extraordinary evidence. Show credible sources.

  5. Don't accuse others of shilling
    Send honest concerns to the moderators and/or admins, and we will investigate.

  6. Do not remove your help posts after they receive replies
    Half the point of asking questions in a public sub is so that everyone can benefit from the answers—which is impossible if you go deleting everything behind yourself once you've gotten yours.

founded 2 years ago
MODERATORS
 

Hey #Firefox hackers! My credit card issuer, Chase, does something funky where its page won't load unless it's in the focused tab:

https://secure.chase.com/web/auth/dashboard

I want to get it to load in the background instead.

Any ideas? I tried turning off all the lazy-load-enabled settings in about:config but that didn't work.

top 6 comments
sorted by: hot top controversial new old
[–] dveditz@infosec.exchange 1 points 16 hours ago

@pluralistic@mamot.fr

I get the same results in Chrome and Firefox: if you open that URL in a background tab it waits for you to switch to it, so it looks like something Chase is doing on purpose.

When it does render, the url is updated to https://secure.chase.com/web/auth/dashboard#/dashboard/overview

Chase appears to use the "hash" part of the URL as commands. If you try to load that full URL with the hash part then it does seem to render in a background tab just fine in Chrome and Firefox.

Why are you trying to bypass a security feature of your bank? Because that's obviously what this is, so that nothing shady can happen in the background without your knowledge. This post seems pretty suspicious to me.

Maybe your interests are completely innocent, but this kind of bypass can and likely has been used nefariously.

[–] steve_zeke@freeradical.zone 4 points 3 days ago

@pluralistic@mamot.fr
Not sure this is related but since I started using CanvasBlocker addon, they make me use MFA every time with 8 digit pin and pw again. It’s as if part of their auth process is digital fingerprinting. Caveat: I’m not a hacker or expert (in case it wasn’t obvious). Why not just wait for page load? Shpilkes?

https://en.m.wiktionary.org/wiki/shpilkes

[–] c01x@infosec.exchange 2 points 3 days ago (1 children)
[–] pluralistic@mamot.fr 2 points 3 days ago

@c01x@infosec.exchange Thanks!

[–] cornelius@mastodon.me.uk 1 points 3 days ago

@pluralistic@mamot.fr is this background tab throttling? Sounds like that’s not what you tried disabling. This website seems semi decent at offering help: https://www.itechtics.com/disable-tab-throttling/#disable-sleeping-tabs-in-google-chrome