topic Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access! in Discussions

Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

Animaitor — Sat, 11 Jan 2025 14:43:43 GMT

After updating Firefox to 134 from 133 I get a Defender message warning me firefox.exe is trying to access %userprofile%\Documents It happens after a few minutes of opening Firefox and it doesn't matter what site I have opened. I already restarted the PC and get the same behavior.

Am I the only one? What changed from the previous Firefox version to the new one?

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

fidodido — Sun, 12 Jan 2025 13:32:59 GMT

Hi, haven't any updates myself manually, but the last 3-4 days same things happens to me.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

Animaitor — Sun, 12 Jan 2025 23:44:19 GMT

Well, good to know I'm not the only one.

@fidodido, what version of Firefox are you running?

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

qw — Tue, 14 Jan 2025 08:33:28 GMT

Same here. Firefox version 134.0

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

CJatWork — Wed, 15 Jan 2025 19:08:34 GMT

Same here the last few days since updating to 134.0 but just updated to 134.0.1 as I was composing my post, so we'll see if there's a change.

[update-1] 24 hours since updating to 134.0.1 and I have not seen the message from Defender pop up. I visited many sites in my history from the previous few days, didn't trigger anything. Doesn't mean the update fixed it; I'm just reporting it hasn't happened since.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

Animaitor — Wed, 15 Jan 2025 00:49:00 GMT

I'm at work and I don't want to update to 134.0.

I'll install 134.0.1 once I get home tonight and I'll report back if they fixed this problem.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

l2eused — Wed, 15 Jan 2025 15:46:17 GMT

same here, firefox 134.0.1

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

fidodido — Wed, 15 Jan 2025 16:49:31 GMT

134.0

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

CJatWork — Wed, 15 Jan 2025 19:16:28 GMT

I updated my post to include the fact that since updating to 134.0.1, I've not had any Defender pop up messages. But it seems I2eused has the same issue in spite of having the latest update. Curiouser and curiouser. 🤔

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

Animaitor — Thu, 16 Jan 2025 02:05:42 GMT

I can confirm that with 134.0.1 the Defender warning is gone.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

CJatWork — Thu, 16 Jan 2025 23:10:57 GMT

I'm getting the Defender warning again. Still wants access to the Documents folder.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

Animaitor — Fri, 17 Jan 2025 00:13:42 GMT

Do you keep any tabs open? How about add-ons?

In my case, I do keep many tabs open and have 4 activated add-ons. Still no Defender warnings.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

CJatWork — Fri, 17 Jan 2025 17:09:18 GMT

I don't keep any tabs open, nor do I have any add-ons. The warning popped up again just now. I followed the link from the notification email regarding this thread, Firefox opened to this page and seconds later I get the Defender warning.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

Animaitor — Sat, 18 Jan 2025 00:16:48 GMT

Wow, that's bizarre. It must be something very few people experienced or reddit, youtube, etc would've been full of thread talking about it.

It's obvious Firefox team doesn't know about it or ignores this problem completely.

I have found a few threads about this matter, one on reddit the other on some forum but no real fix found or reason as to why this happens.

https://www.askwoody.com/forums/topic/firefox-134-needs-controlled-folder-access/

https://www.reddit.com/r/firefox/comments/1hwvtp2/why_the_new_ff_134_wants_to_see_my_personal/

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

CJatWork — Thu, 23 Jan 2025 17:56:32 GMT

Thanks for the links. I was rocking v133 for a few days. No Defender pop ups so it's definitely v134+, at least for me.

Switched back to 134 but noticed it is now 134.0.2 not the .1 than I last used. While doing this back and forth switch, I screwed up my profile. Got that all squared away and the pop ups are gone; this is day 2, many hours of running the browser. Fingers crossed.

But now the question is, was it the version update or the process of creating a new profile? That brings up another question... will a simple refresh fix the problem for a person who is still experiencing this? Someone will correct me if I'm wrong but I believe a refresh is a simple way of creating a new profile and copying all your bookmarks, history, passwords, etc. to the new profile. I just did it the hard way, heh-heh.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

Ulmo — Thu, 06 Mar 2025 09:58:23 GMT

I've just installed the latest version, 137.0b2, and it also tries to access %userprofile%\Documents. I don't allow it via defender, and I haven't noticed any consequential problem, but the pop-up is quite annoying. Please Mozilla, what are you doing, why do you try to access this folder and its files?

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

CJatWork — Thu, 06 Mar 2025 17:03:35 GMT

I'm still at 135, about to update to 136. I've had the popup return only a couple times since it settled down. I'm wondering now if we could be barking up the wrong tree. If you open a tab and enter file:///C:/Users/<your profile name here>/Documents as the URL, you can see and access the files in your Documents folder. How is that not allowing Firefox access to the folder already? Maybe Firefox is trying with a protocol other than "file" OR... is this a problem with Defender falsely blocking Firefox? Maybe we should be yelling at Microsoft for a fix?

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

Ulmo — Sun, 09 Mar 2025 14:21:33 GMT

I don't know, complete mystery. Fact is that the profile folder is in %appdata%\Local\Mozilla\Firefox\Profiles) (and then some in \Roaming\Mozilla\Firefox\Profiles), not in %userprofile%\Documents. I haven't seen any bug nor oddities as I keep it blocked (the Defender warning appears every time, a minute or so after I open the browser). Hence I won't allow it, but it's weird and annoying.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

Qubo — Sat, 29 Mar 2025 03:12:44 GMT

I have the same problems with both Firefox and LibreWolf. I assume it has something to do with Firefox's new privacy policy.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

grundt — Thu, 24 Apr 2025 13:28:57 GMT

(oops, replied to wrong post and can't delete ... see below)

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

grundt — Wed, 23 Apr 2025 17:42:48 GMT

Two weeks ago I set browser.backup.enabled to false (in about:config) and haven't had the issue since.

The way I discovered that particular setting was by browsing the the gecko github repo, looking for places that were using the Documents folder. I found a couple of comments mentioning that the Documents folder was a default:

and then found the setting needed to override the default (which is browser.backup.location) :

github - BackupService.sys.mjs#L22

But because I didn't know what format was necessary for the "browser.backup.location" setting, and had spotted the "browser.backup.enabled" setting, I just changed that to false and it seems to have done the trick.

And btw, I have no idea what this whole "backup service" feature is ... I couldn't find it documented anywhere.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

grundt — Thu, 24 Apr 2025 13:27:01 GMT

according to this article: How does controlled folder access work?
"Apps ... are prevented from making any changes to files inside protected folders", which explains why the (readonly) file: protocol wouldn't trigger a violation

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

CJatWork — Thu, 24 Apr 2025 22:22:38 GMT

Thank you, grundt, for the link. I see your point and I can't disprove it BUT... I could do the same and play off highlighting a different word. "Controlled folder access works by only allowing trusted apps to access protected folders." If the goal is file protection, you don't want malware/ransomware to even read your files. That said, I have no idea what protocols are allowed/blocked anywhere, I'm just interpreting the same information from another direction. Doing that, in addition to the fact that through the last several updates I have not seen the popup, I'm going to keep my stack of chips on "Defender false positive". 😏

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

CJatWork — Thu, 24 Apr 2025 22:25:01 GMT

Nice. I'm going to keep this one on file. If it acts up again, I'll give it a try.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

grundt — Thu, 24 Apr 2025 23:11:01 GMT

Your discovery that the File: protocol wasn't being blocked (it surprised me) is what prompted me to seek out an explanation in the first place. I mean, after all the name of the feature itself suggests that it blocks access.
But here's another article ( this one from Eric Lawrence, a former Microsoft employee and the creator of Fiddler, if you happen to be familiar with that tool ) explaining the nuts & bolts of Controlled Folder Access.
See the paragraph titled How?, where he explains that the way it actually works is by intercepting and stripping the write permission from folder access requests.

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

grundt — Tue, 27 May 2025 00:41:31 GMT

See also this discussion, which references a bug that's been opened:
https://connect.mozilla.org/t5/discussions/does-firefox-ever-write-to-logged-in-users-documents-folder/m-p/97049/highlight/true#M37854

Here's a direct link to the bug report:
https://bugzilla.mozilla.org/show_bug.cgi?id=1948976

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

uk_tk — Tue, 27 May 2025 17:41:09 GMT

Another option is to set browser.backup.preferences.ui.enabled to true so the apparently new function can be properly managed in settings interface and the location set to somewhere sensible like %AppData%\Mozilla\Firefox\Profiles\Backups\ firefox then creates a subfolder called "Restore Firefox" and in that folder creates html files including a zip archive as an inline attachment 1 file per backup: FirefoxBackup_default-release_20250527-1755.html Since enabling the ui and configuring to a new sensible location I've not seen any further protected folder access violations. It could simply default to %AppData%\Mozilla\Firefox\ and the buggy Documents folder write access would cease forever.

Hope it helps!

Re: Firefox 134.0 blocked by Defender, needs Controlled Folder Access!

uk_tk — Wed, 28 May 2025 01:32:53 GMT

Spoke too soon, with the backups set as in previous post and the ui enabled I later relaunched firefox and a little while after the launch I got the exact same protected folder access alert even though the location was no longer the default Documents folder and when I looked the old backup file had been replaced by a new one timestamped at or around the time of the alert.

So the only workaround for this buggy new backup feature is to use about:config to disable it and only ever enable it when it is really needed (which it hasn't been needed so far, as far as I can tell for normal firefox operation. Or it becomes mature and sensibly configured by default to use something like the configured download folder which is easily user accessible and firefox.exe has write permissions for and is expected to have practically any content in it.