Repository navigation
LAN lists no longer support forced updates #4149
Description
Activity
- added a commit that references this issue
on Oct 7, 2026 - addedfeedback neededneed more feedback from the issue submitterneed more feedback from the issue submitter
on Oct 8, 2026 Need feedback about whether it's fixed in latest dev build.
From my perspective, it doesn't seem to be enough for
https://localhost/path/file.txt.The good news is that I can use a local IP address like 10.x.x.x / 172.x.x.x / 192.x.x.x instead of “localhost/” with https://simplewebserver.org/docs/https.html (but not yet with Rebex).
In the logger, the same block reason:
https://github.com/user-attachments/assets/bd6dd7ae-bc39-4626-879c-0bf992b161a8
I'd be surprised if two Windows installations and as many as three Firefox profiles were damaged. In theory, I could remove the extension, restart the browser twice, install the latest dev build, enable the LAN intruder blocklist, and check if that fixes the update mechanism for localhost in both applications that offer a server—or at least the IP address in Rebex.
It's more likely that a simple server from https://www.rebex.net/tiny-web-server/ / https://simplewebserver.org/docs/https.html are tricking the network at localhost (and IP for Rebex), causing the newer version to detect this as a LAN breach.
I still need to rule out the possibility that the VPN network card connected to the ZeroTier network might have started being detected as a LAN from the outside. I'm just not sure if I can reconfigure ZeroTier on my own to work in a mode other than just turning it on when needed (e.g., at night and on weekends, but not middle of the day).
- added a commit that references this issue
on Oct 8, 2026 - changed the title
[-]New public suffix logic doesn't work with browser-scheme?[/-][+]LAN lists no longer support forced updates[/+]on Oct 8, 2026 It's working now with the fix to the tab.js file.
- addedbugSomething isn't workingSomething isn't workingfixedissue has been addressedissue has been addressedand removedfeedback neededneed more feedback from the issue submitterneed more feedback from the issue submitter
on Oct 9, 2026
Prerequisites
I tried to reproduce the issue when...
Description
In Firefox I have a certain list on HTTPS over localhost and I noticed that the update for it no longer works with the LAN intruder block list.
I've checked several times to see if I've deleted any important stock dynamic or trust rules for moz-extension-scheme and they don't seem to be related to this.
from Logger
A specific URL where the issue occurs.
moz-extension://uuid.moz-extension-schemeSteps to Reproduce
Expected behavior
It is expected that this workaround will not be required:
Troubleshooting information
Similar in Firefox 153.