Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
47535
Reakcje/Polubienia
37924

Pale Moon 33.8.0.0​

  • This is a major development, bugfix and security release.
  • Changes/fixes:
  • Pale Moon now includes all non-ubiquitous image and media types in the navigation Accept: header, as discussed in the relevant whatwg fetch spec issue.
  • Implemented .toJSON() for DOMRect, DOMPoint and DOMMatrix.
  • Added a base implementation of the SVGGeometryElement API. This is currently limited to .pathLength, getTotalLength() and getPointAtLength(distance)for SVG paths.
  • Added a base-64/character validity grammar check for CSP nonces.
  • Enabled JPEG-XL support unconditionally.
  • Improved desktop ARM media capabilities.
  • Improved our handling of CSP checks (multiple improvements surrounding loading principal checks).
  • Added several Mac-specific file types to be treated as executables.
  • Updated the emoji font to Unicode 16.0.0. We can now finally have the "tired dev" emoji !
  • Updated SQLite library to 3.50.1.
  • Updated NSS to 3.90.7.1 to fix some issues with some sites due to prior root certificate updates.
  • Updated code dealing with internal URL rewrites for Youtube.
  • Changed the Firefox compatibility mode version to 128.
  • Changed how .click() on <A> elements is handled. See implementation notes.
  • Changed DOMMatrix's rotate() and rotateSelf() functions to accept 3D rotation instead of 2D, per spec.
  • Changed CSS parameter animation to round values instead of truncating them, per spec.
  • This affects all integer properties (e.g. z-order) and font-stretching.
  • Changed HTML element attribute parsing to additionally escape < and > characters, per spec.
  • Fixed a regression in XUL <tree> elements where column selection would omit the first-defined column.
  • Fixed a minor issue in DOMSVGPoint finity checks.
  • Fixed some minor platform issues and updated Mac SDK checks.
  • Fixed an issue when device contrast values would be unset in Mac or Windows+DirectWrite.
  • Fixed an issue in 33.7.2's updated "Copy as curl" feature which could potentially mangle URLs.
  • Fixed an issue with FontFaceSet loading.
  • Removed support for very old libavcodec versions (before v58).
  • Removed the CSP referrer directive as it's no longer in the spec.
  • Removed preloading of a number of media libraries on Windows. See implementation notes.
  • Removed the allowance of <A> in image maps. Only <area> is now supported.
  • Removed several obsolete and unused preferences from about:config.
  • Removed obsolete NPN preferences and calls. NPN has long since been replaced by ALPN.
  • Removed obsolete SVGZoomEvent interface and handlers.
  • Security issues addressed: CVE-2025-6429, CVE-2025-6424 (DiD) and CVE-2025-6426.
  • Implementation notes:
  • Normally, when a script issues a simulated click on an element, that click is issued on the document the element is in. Unfortunately there has been a percieved bug in mainstream browsers where this didn't happen on anchors (<A>, hyperlinks) and the browser would navigate even if that anchor was not actually in a web page document (i.e. just created as a reference in scripting). This was eventually made an accepted behaviour in the specification as an exception, describing this bug as expected behavior. Pale Moon has now changed how it handles .click() events on anchors to follow this behavior. This primarily impacts some select "download button" behavior on the web where this behavior quirk for anchors is relied on.
  • Previously, Pale Moon would preload a number of media .dll files into the browser, causing resource use even if there was no media to be decoded or played back in the browsing session yet. This was primarily done in inherited Mozilla code for EME to work. Since we don't support in-browser DRM, this preloading is wholly unnecessary and has been removed.
Zaloguj lub Zarejestruj się aby zobaczyć!
 

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
47535
Reakcje/Polubienia
37924

Pale Moon 33.8.1.0​

  • Changes/fixes:
  • Pale Moon no longer accepts nameless cookies. See implementation notes.
  • Improved the "copy as curl" command in devtools further, partially rolling back the DiD changes in previous versions since we aren't offering cross-platform commands and it caused potential issues with overzealous escaping.
  • Fixed a potential use-after-free scenario in the CSS parser.
  • Fixed uninitialized use of fontconfig scenarios for Linux/GTK.
  • Adjusted CSP URI reporting to more closely match the current spec and common browser behavior.
  • Fixed a potential crash in font handling.
  • Adjusted the size of WASM compiled table size limits to match V8/Gecko.
  • Increased restrictions on the types of data loads <object> elements are allowed to trigger, to match the fetch spec more closely.
  • Fixed build issues for PPC architectures.
  • Security issues addressed: CVE-2025-8031, CVE-2025-8028 (DiD), CVE-2025-8037 (and related), CVE-2025-8029, and several others that do not have a CVE number.
  • Implementation notes:
  • From this version forward we no longer accept nameless cookies. If a cookie has no name and starts with an equal sign, it is outright rejected. If a cookie consists only of a string with no equal sign, it is interpreted as a valueless cookie with the name set to the string. This departs from our inherited Mozilla behavior where this was previously treated as a nameless cookie with the string as the value.
  • RFC 6265 forbids cookies without an equal sign (§5.2 step 2), but browsers accept them anyway for web compatibility reasons (poor web design). Moreover, §5.2 step 5 explicitly forbids nameless cookies.
  • Valueless names also make more sense in web context: Set-cookie: itself supports secure and httponly as valueless attributes, and HTML supports valueless attributes as well.
  • Our new behavior therefore makes more logical sense, is closer to the spec and general principles, aligns with webkit/Safari and solves a whole class of potential sec bugs like CVE-2025-8037. Apologies if this causes web compat issues, but it's the sane thing to do when encountering non-compliant cookies.
Zaloguj lub Zarejestruj się aby zobaczyć!
 

Mohammad.Poorya

Bardzo aktywny
Ekspert
Dołączył
19 Wrzesień 2018
Posty
3476
Reakcje/Polubienia
14061
Miasto
On a Bike!

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
47535
Reakcje/Polubienia
37924

Waterfox 6.6.0

Waterfox 6.6.0 is a major release that upgrades the underlying platform from 128.0 to 140.0 and delivers first‑party vertical tabs, private tabs in the same window, tab grouping, new‑tab wallpapers, expanded media and hardware acceleration, and sensible privacy defaults. This final release rolls up all changes from the beta series and includes stability and polish fixes.


Highlights

  • Vertical Tabs with optional Tree view
  • Private Tab button next to New Tab
  • Automatic Tab Grouping (configurable)
  • New Tab wallpapers, optional search bar and weather
  • Firefox profile import (bookmarks, history, passwords, cookies, form data)
  • WebGPU enabled; VP8/VP9 hardware acceleration for WebRTC
  • JPEG XL support; improved MathML rendering
  • Privacy‑friendly defaults (less promos, fewer speculative/remote fetches)
  • Numerous UI refinements and performance improvements

New

Tabs & Sidebar

  • Vertical Tabs: First‑party vertical tabstrip integrated into the sidebar, with customization options.
  • Tree‑Style Vertical Tabs: Optional tree layout for vertical tabs.
    • How to enable: Show sidebar → Customize sidebar → Sidebar settings → Vertical tabs → Tree vertical tabs.
  • Private Tab Button: Quick “New Private Tab” button next to the New Tab button.
  • Automatic Tab Grouping: New tabs can automatically open within your existing tab groups for a more organized session.
    • Config (about:config):
      • browser.tabs.autoGroupNewTabs: true/false (default: true)
      • browser.tabs.autoGroupNewTabs.placement: "after" (default), "first", or "last"
      • browser.tabs.autoGroupNewTabs.delayEnabled: true/false (default: false)
      • browser.tabs.autoGroupNewTabs.delayMs: milliseconds (default: 1000)
      • browser.tabs.autoGroupNewTabs.cancelShortcut: defaults to Alt+ (macOS) / Ctrl+ (Windows/Linux)

New Tab Page

  • Wallpapers: Use curated solid colors, custom colors, or your own image.
  • Optional search bar toggle.
  • Optional weather widget (opt‑in; see Mozilla’s documentation for data usage details).

Migration

  • Firefox Profile Import: Import bookmarks, history, cookies, form history, and passwords directly from a Firefox profile.
    • Note: After importing passwords, restart Waterfox to apply changes.
Zaloguj lub Zarejestruj się aby zobaczyć!
 

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
47535
Reakcje/Polubienia
37924

Waterfox 6.6.1

Fixes

Zaloguj lub Zarejestruj się aby zobaczyć!

WebGPU

Zaloguj lub Zarejestruj się aby zobaczyć!

  • Removed code that prevented WebGPU from running on release channel builds

Misc

Zaloguj lub Zarejestruj się aby zobaczyć!

  • Re-implemented support for Unity global menu on Linux, with thanks to the
    Zaloguj lub Zarejestruj się aby zobaczyć!
  • Fixed an issue where the Install update option in about:addons did not appear after a manual update check when automatic updates were disabled
  • Fixed an issue where the Restart command was not working on Linux and Windows (macOS unaffected)
  • Fixed an issue where the Restart command was misaligned on Linux and Windows when icons in menus were disabled
  • Disabled Captive Portal detection, let the operating system handle it instead, one less network request to Mozilla

Waterfox string updates​

Zaloguj lub Zarejestruj się aby zobaczyć!

  • Reordered and grouped entries in language files for improved readability and maintainability; no functional changes intended
  • Restored two Tree Vertical Tabs strings inadvertently dropped during the reorg:
    • tree-auto-collapse-expand-subtree-on-attach (.label, .accesskey)
    • tree-auto-collapse-expand-subtree-on-select (.label, .accesskey)

Private Tabs improvements​

Zaloguj lub Zarejestruj się aby zobaczyć!

  • New preference to control button visibility
    • browser.privateTab.showNewTabButton
      • Controls the New Private Tab button next to the New Tab button
      • Applies instantly in both horizontal and vertical tab layouts
      • Is now false by default, toggle to true to enable
  • Privacy enhancements for Private Tabs
    • Search suggestions are disabled in the address bar for Private container tabs
      • Neither remote engine suggestions nor local form history suggestions will appear
    • Search terms from Private container tabs are no longer saved
      • Form history entries are not written
      • Input/adaptive history is not written
    • The address bar view is cleared when switching into a Private container tab to avoid showing stale entries
Zaloguj lub Zarejestruj się aby zobaczyć!
Zaloguj lub Zarejestruj się aby zobaczyć!
 
Do góry