Since the upgrade of firefox to 138, using the 'download' method fails with the
following error:

 System access is required to switch to chrome scope. Start Firefox with
 "-remote-allow-system-access" to enable it.

Indeed, adding the following after line 4702 of Marionette.pm makes the error
go away:

    if ($self->_is_firefox_major_version_at_least(138)) {
        push @arguments, '-remote-allow-system-access';
    }

The debsums error below is because of that change.

Nice catch!

The build in unstable also fails when I change the B-D to just
"firefox", saying

<< 927:[1,6,{"error":"unsupported operation","message":"System access is required to switch to chrome scope. Start Firefox with \"-remote-allow-system-access\" to enable it.","stacktrace":"RemoteError@chrome://remote/content/shared/RemoteError.sys.mjs:8:8\nWebDriverError@chrome://remote/content/shared/webdriver/Errors.sys.mjs:199:5\nUnsupportedOperationError@chrome://remote/content/shared/webdriver/Errors.sys.mjs:927:5\nset@chrome://remote/content/marionette/driver.sys.mjs:338:13\nGeckoDriver.prototype.setContext@chrome://remote/content/marionette/driver.sys.mjs:811:3\ndespatch@chrome://remote/content/marionette/server.sys.mjs:318:40\nexecute@chrome://remote/content/marionette/server.sys.mjs:289:16\nonPacket/<@chrome://remote/content/marionette/server.sys.mjs:262:20\nonPacket@chrome://remote/content/marionette/server.sys.mjs:263:9\n_onJSONObjectReady/<@chrome://remote/content/marionette/transport.sys.mjs:494:20\n"},null]
unsupported operation: System access is required to switch to chrome scope. Start Firefox with "-remote-allow-system-access" to enable it. at t/01-marionette.t line 806

And with this change the testsuite passes against FF 138.


What looks a bit scary is:

https://firefox-source-docs.mozilla.org/remote/Security.html

     Note: Enabling this flag grants unrestricted access to all
     available Gecko APIs for both the Marionette and WebDriver BiDi
     protocols, allowing tests to interact directly with the host
     system or the device running the test. Use this flag only when
     absolutely necessary.


OTOH, reading https://firefox-source-docs.mozilla.org/remote/Prefs.html
this might be the preferred way:

     Instead of switching the preference value, the client should
     ideally fix the breakage by passing -remote-allow-system-access
     as an argument to the Firefox binary.


I've prepared a patch in git but I'm first forwarding the bug report
to see if/what upstream has to say about it.


Cheers,
gregor

Hello,

Bug #1105817 in libfirefox-marionette-perl reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/perl-team/modules/packages/libfirefox-marionette-perl/-/commit/de1245d01a15bc4473600c9a7a1591364a412ff9
------------------------------------------------------------------------
Add patch for compatibility with Firefox >= 138.

Thanks: Damyan Ivanov for the bug report and patch.
Closes: #1105817
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1105817

We believe that the bug you reported is fixed in the latest version of
libfirefox-marionette-perl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1105817@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
gregor herrmann <gregoa@debian.org> (supplier of updated libfirefox-marionette-perl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 17 May 2025 13:06:36 +0200
Source: libfirefox-marionette-perl
Architecture: source
Version: 1.65-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa@debian.org>
Closes: 1105817
Changes:
 libfirefox-marionette-perl (1.65-1) unstable; urgency=medium
 .
   * Import upstream version 1.64.
   * Import upstream version 1.65.
     Closes: #1105817
     Thanks to Damyan Ivanov for the bug report.
   * Refresh no-network.patch (offset).
   * Skip t/04-uploads.t.
   * Refresh lintian overrides (line numbers).
Checksums-Sha1:
 4dd4b4772fd18b884554d4553d8cfd5844619acc 3234 libfirefox-marionette-perl_1.65-1.dsc
 bd5a419c7e740a6a2d0cc009bee76c8f29461d0b 429611 libfirefox-marionette-perl_1.65.orig.tar.gz
 4483871346b0ae50e6d5931cf6de4b21b0cd0c83 28692 libfirefox-marionette-perl_1.65-1.debian.tar.xz
Checksums-Sha256:
 284b8ee76958ce6afc1470a18913a429ea22cd3652f36ddfc95efa7c051851e1 3234 libfirefox-marionette-perl_1.65-1.dsc
 dddb45a4f5dbfdae9e0df9df600142b3e58b0d5b9a2d92c5f28ed312621d8d24 429611 libfirefox-marionette-perl_1.65.orig.tar.gz
 da6d39da98065754339e9180f1dea556f12dd5dbb059fb424999aa89f2f8f875 28692 libfirefox-marionette-perl_1.65-1.debian.tar.xz
Files:
 50b5531a04f07e710543157a4120bd28 3234 perl optional libfirefox-marionette-perl_1.65-1.dsc
 41d6f0e6614ef30636609fa24fd423ee 429611 perl optional libfirefox-marionette-perl_1.65.orig.tar.gz
 531f8c490b137b907d0641f96507da57 28692 perl optional libfirefox-marionette-perl_1.65-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
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=Yybq
-----END PGP SIGNATURE-----