Mozilla Firefox

Google has rolled back a recent release of its reCaptcha captcha script after a bug caused the service to no longer work on Firefox for Windows.

Yesterday, BleepingComputer received multiple reports that reCaptcha stopped working in the latest version of Mozilla Firefox, with the issues also reported on Twitter and Reddit.

BleepingComputer tested reCaptcha on our devices and confirmed that the service no longer worked in Firefox. Instead, the reCaptcha prompt would show an endlessly spinning circle instead of performing the regular captcha routine, as shown below.

Endlessly spinning reCaptch circle
Endlessly spinning reCaptcha circle
Source: BleepingComputer

According to a Mozilla bug report, the issue was related to reCaptcha's dark mode detection routine for Firefox in Windows.

The script attempted to modify a div's background color using document.body.removeChild, but as the script was loaded in the HTML head, the DOM had not loaded yet and document.body was not available, causing the script error.

As a temporary workaround, users could change their browser user agent to one for Microsoft Edge and Google Chrome, and reCaptcha would work again.

Mozilla Firefox software engineer Dennis Schubert confirmed the bug, stating that Google acknowledged it was an issue in their script rather than the browser and was working on a fix.

"Yes, Google is rolling out a fix. It seems to work in several of our internal tests on multiple continents, but we'll keep this bug open until we're sure it's fixed for everyone," posted Schubert.

An hour later, Google reverted back to an earlier version of the script, fixing the bug for Firefox users.

While some were quick to pin this as being intentional by Google, it appears to be a mistake that was quickly resolved.

Related Articles:

Mozilla Firefox can now secure access to passwords with device credentials

Google Chrome to let Isolated Web App access sensitive USB devices

Polyfill.io JavaScript supply chain attack impacts over 100K sites

Chrome for Android tests feature that securely verifies your ID with sites

YouTube tests harder-to-block server-side ad injection in videos