Waterfox
Waterfox copied to clipboard
dev tools: copy as cURL add extra symbol to form fields
What happened?
I use WaterFox as my main browser every day, and sometimes I need certain features from the developer tools.
Today, I needed to copy a network request as cURL, and I noticed that WaterFox adds an extra ^ character to some request fields.
This issue does not occur in Firefox 143. Such behavior could be reproduced on few sites
Here is request example
curl 'https://example.com/appsuite/api/login' \
-X POST \
-H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0' \
-H 'Accept: */*' \
-H 'Accept-Language: en-US,en;q=0.5' \
-H 'Accept-Encoding: gzip, deflate, br, zstd' \
-H 'Referer: https://example.com/' \
-H 'Content-Type: application/x-www-form-urlencoded' \
-H 'Origin: https://example.com' \
-H 'Sec-GPC: 1' \
-H 'Connection: keep-alive' \
-H 'Cookie: ===REMOVED_FOR_PRIVACY====' \
-H 'Sec-Fetch-Dest: empty' \
-H 'Sec-Fetch-Mode: cors' \
-H 'Sec-Fetch-Site: same-origin' \
-H 'Idempotency-Key: "===REMOVED_FOR_PRIVACY===="' \
-H 'Priority: u=0' \
--data-raw 'action=login^&staySignedIn=true^&name=aaabbbccc%40test-test-test.com^&password=asdfasdfa^&client=open-xchange-appsuite^&version=7.10.2-Rev20^&timeout=10000^&rampup=true^&rampUpFor=open-xchange-appsuite'
almost all fields in --data-raw has trailing ^
This issue related only to "copy as cURL" freature, request itself sending w\o symbol ^
Reproducible?
- [x] I have checked that this issue cannot be reproduced on Mozilla Firefox.
Version
6.6.3
What platform are you seeing the problem on?
Linux
Symbol ^ added not only to POST data, but also to the GET params and cookies
Here is GET example, only necessary fields:
curl 'https://example.com/appsuite/api/mail?action=threadedAll^&folder=default0%2FINBOX^&....' \
-H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0' \
...
-H 'Cookie: OptanonConsent=landingPath=NotLandingPage^&datestamp=Fri+Sep+26+2025+12%3A31%3A25+GMT%2B0200+(Central+European+Summer+Time)^&version=202305.1.0^&groups=C0001%3A1%2CC0002%3A0%2CC0003%3A0%2CC0004%3A0^&hosts=^&isGpcEnabled=0^&browserGpcFlag=1^&geolocation=XX^&isIABGlobal=false^&AwaitingReconsent=false;'