Firefox Profiler Deployment (May 15, 2025)

The latest version of the Firefox Profiler is now live! Check out the full changelog below to see what’s changed:

Security fix:

  • [Julien Wajsberg] Do not use a link to display the sourceURL if it’s not a proper URL (#5454). This fixes a XSS vulnerability (see the advisory).

Highlights:

  • [Julien Wajsberg] Relax the check about chrome profiles (#5439)
  • [Julien Wajsberg] Use the right allocations call tree when an allocations summary is selected (#5456)

Other Changes:

  • [Julien Wajsberg] Do not fail when the input isn’t valid UTF-8 (#5426). This was happening because of Bug 1960362 in Firefox.
  • [Markus Stange] Add the marker field types “flow-id” and “terminating-flow-id” to the set of types that store indexes in the string table (#5447)
  • [Markus Stange] Retain platform-specific timestamp field that are being added in bug 1961012. (#5446)
  • [Jon Coppeard] Update GCMinor profile markers to remove object group information and move calculation of tenuring allocation rate to the browser (#5440)
  • Various dependency updates

Big thanks to our amazing localizers for making this release possible:

  • kab: ZiriSut
  • zh-CN: Olvcpr423

Find out more about the Firefox Profiler on profiler.firefox.com! If you have any questions, join the discussion on our Matrix channel!


Julien