O&O SafeErase Professional Edition (64-bit) 歷史舊版本 Page6

最新版本 O&O SafeErase Professional 17.0 Build 190 (64-bit)

O&O SafeErase Professional Edition (64-bit) 歷史版本列表

當您銷售,放棄或銷毀舊電腦或硬盤驅動器時,您的個人照片和機密文件很容易落入不法分子的手中。身份盜用現在是一個普遍的安全威脅。這是因為點擊“刪除”並不意味著你的文件被永久刪除。即使格式化硬盤也不足以永久刪除數據。 O& O SafeErase 64 位永久刪除您的機密文件使用公認的方法,使恢復是永遠不可能的,即使當使用最好的文件恢復軟件。O& O SafeErase 功能:“即時擦除... O&O SafeErase Professional Edition (64-bit) 軟體介紹


Node.js 12.11.1 (64-bit) 查看版本資訊

更新時間:2019-10-02
更新細節:

What's new in this version:

Notable changes:
Build:
- This release fixes a regression that prevented from building Node.js using the official source tarball

Deps:
- Updated small-icu data to support "unit" style in the Intl.NumberFormat API

Commits:
- build: include deps/v8/test/torque in source tarball
- build,win: goto lint only after defining node_exe
- crypto: use byteLength in timingSafeEqual
- deps: enable unit data in small-icu
- doc: sync security policy with nodejs.org
- doc: fix output in inspector HeapProfile example
- doc: add KeyObject to type for crypto.createDecipheriv() argument
- doc: clarify description of readable.push() method
- doc: clarify stream errors while reading and writing
- doc: specify display=fallback for Google Fonts
- doc: fix some recent nits
- doc: fix 404 links
- doc: remove align from tables
- doc: document that iv may be null when using createCipheriv()
- doc: update AUTHORS list
- doc: clarify pipeline stream cleanup
- doc: clarify fs.symlink() usage
- doc: fix type of atime/mtime
- doc,http: indicate callback is optional for message.setTimeout()
- http2: optimize the altsvc Max bytes limit, define and use constants
- module: pass full URL to loader for top-level load
- module: move cjs type check behind flag
- src: rename --loader to --experimental-loader
- src: fix asan build for gcc/clang
- src: fix compiler warning in inspector_profiler.cc
- src: disconnect inspector before exiting out of fatal exception
- src: try showing stack traces when process._fatalException is not set
- test: fix flaky test-cluster-net-listen-ipv6only-none
- tls: simplify setSecureContext() option parsing
- tools: make mailmap processing for author list case-insensitive
- worker: fix process._fatalException return type
- worker: keep allocators for transferred SAB instances alive longer

Node.js 12.11.0 (64-bit) 查看版本資訊

更新時間:2019-09-26
更新細節:

What's new in this version:

crypto:
- Add oaepLabel option

deps:
- Update V8 to 7.7.299.11 #28918
- More efficient memory handling
- Stack trace serialization got faster
- The Intl.NumberFormat API gained new functionality
- For more information: https://v8.dev/blog/v8-release-77

events:
- Add support for EventTarget in once

fs:
- Expose memory file mapping flag UV_FS_O_FILEMAP

inspector:
- New API - Session.connectToMainThread

process:
- Initial SourceMap support via env.NODE_V8_COVERAGE

stream:
- Make _write() optional when _writev() is implemented

tls:
- Add option to override signature algorithms

util:
- Add encodeInto to TextEncoder

worker:
- The worker_thread module is now stable

Commits:
- benchmark: improve process.env benchmarks (Anna Henningsen)
- bootstrap: add exception handling for profiler bootstrap (Shobhit Chittora)
- bootstrap: provide usable error on missing internal module (Jeremiah Senkpiel)
- build: do not indent assignments in Makefile (Joyee Cheung)
- build: allow clang 10+ in configure.py (Kamil Rytarowski)
- build: re-run configure on node_version.h change (Anna Henningsen)
- build: improve make coverage (Anna Henningsen)
- build: add comment to .travis.yml on how to test Py3 (cclauss)
- build: update minimum AIX OS level (Michael Dawson)
- build: remove experimental Python 3 tests (Christian Clauss)
- (SEMVER-MINOR) build: reset embedder string to "-node.0" (Michaël Zasso)
- build,win: fix Python detection on localized OS (João Reis)
- console: skip/strip %c formatting (Gus Caplan)
- console,util: fix missing recursion end while inspecting prototypes (Ruben Bridgewater)
- crypto: use BoringSSL-compatible flag getter (Shelley Vohr)
- (SEMVER-MINOR) crypto: fix OpenSSL return code handling (Tobias Nießen)
- (SEMVER-MINOR) crypto: add oaepLabel option (Tobias Nießen)
- deps: patch V8 to 7.7.299.11 (Michaël Zasso)
- deps: V8: cherry-pick deac757 (Benjamin Coe)
- deps: patch V8 to 7.7.299.10 (Thomas)
- deps: V8: cherry-pick 35c6d4d (Sam Roberts)
- deps: update npm to 6.11.3 (claudiahdz)
- deps: upgrade to libuv 1.32.0 (cjihrig)
- deps: patch V8 to 7.7.299.8 (Michaël Zasso)
- (SEMVER-MINOR) deps: patch V8 to be API/ABI compatible with 7.4 (from 7.7) (Michaël Zasso)
- deps: patch V8 to be API/ABI compatible with 7.4 (from 7.6) (Michaël Zasso)
- (SEMVER-MINOR) deps: patch V8 to be API/ABI compatible with 7.4 (from 7.5) (Michaël Zasso)
- deps: V8: cherry-pick e3d7f8a (cclauss)
- (SEMVER-MINOR) deps: V8: fix linking issue for MSVS (Refael Ackermann)
- (SEMVER-MINOR) deps: V8: fix BUILDING_V8_SHARED issues (Refael Ackermann)
- (SEMVER-MINOR) deps: V8: add workaround for MSVC optimizer bug (Refael Ackermann)
- (SEMVER-MINOR) deps: V8: use ATOMIC_VAR_INIT instead of std::atomic_init (Refael Ackermann)
- (SEMVER-MINOR) deps: V8: forward declaration of Rtl*FunctionTable (Refael Ackermann)
- (SEMVER-MINOR) deps: V8: patch register-arm64.h (Refael Ackermann)
- (SEMVER-MINOR) deps: V8: update postmortem metadata generation script (cjihrig)
- (SEMVER-MINOR) deps: V8: silence irrelevant warning (Michaël Zasso)
- (SEMVER-MINOR) deps: V8: un-cherry-pick bd019bd (Refael Ackermann)
- (SEMVER-MINOR) deps: V8: fix filename manipulation for Windows (Refael Ackermann)
- (SEMVER-MINOR) deps: update V8 to 7.7.299.4 (Michaël Zasso)
- doc: update N-API version matrix (Gabriel Schulhof)
- doc: add code example to process.throwDeprecation property (Juan José Arboleda)
- doc: fix some signatures of .end() methods (Vse Mozhet Byt)
- doc: remove the suffix number of the anchor link (Maledong)
- doc: explain stream.finished cleanup (Robert Nagy)
- doc: fix require call for spawn() in code example (Marian Rusnak)
- doc: make minor improvements to stream.md (Robert Nagy)
- doc: fix nits in net.md (Vse Mozhet Byt)
- doc: correct trivial misspelling in AUTHORS (gcr)
- doc: update list style in misc README docs (Rich Trott)
- doc: add missing complete property to http2 docs (Javier Ledezma)
- doc: add leap second behavior notes for napi methods (Levhita)
- doc: explain esm options for package authors (Geoffrey Booth)
- doc: update experimental loader hooks example code (Denis Zavershinskiy)
- doc: use consistent unordered list style (Nick Schonning)
- doc: add Bethany to TSC (Michael Dawson)
- doc: add Tobias to the TSC (Michael Dawson)
- doc: mention unit for process.hrtime.bigint() (Anna Henningsen)
- doc: add documentation for stream readableFlowing (Chetan Karande)
- doc: indent child list items for remark-lint (Nick Schonning)
- doc: space around lists (Nick Schonning)
- doc: exitedAfterDisconnect value can be false (Nimit Aggarwal)
- doc: remove wrong escapes (XhmikosR)
- doc: prepare markdown files for more stringent blank-line linting (Rich Trott)
- doc: simplify wording in n-api doc (Michael Dawson)
- doc: update release guide with notes for major releases (James M Snell)
- doc: indent ordered list child content (Nick Schonning)
- doc: fix unsafe writable stream code example (Chetan Karande)
- doc: async_hooks.createHook promiseResolve option (Ben Noordhuis)
- doc: change urls directly from 'http' to 'https' (Maledong)
- doc: use consistent indenting for unordered list items (Nick Schonning)
- doc: start unorded lists at start of line (Nick Schonning)
- doc: change the 'txt' to 'console' for a command (Maledong)
- esm: make dynamic import work in the REPL (Bradley Farias)
- events: improve performance of EventEmitter.emit (Matteo Collina)
- (SEMVER-MINOR) events: add support for EventTarget in once (Jenia)
- fs: remove unnecessary argument check (Robert Nagy)
- gyp: make StringIO work in ninja.py (Christian Clauss)
- http: refactor responseKeepAlive() (Robert Nagy)
- http2: do not crash on stream listener removal w/ destroyed session (Anna Henningsen)
- http2: send out pending data earlier (Anna Henningsen)
- http2: do not start reading after write if new write is on wire (Anna Henningsen)
- (SEMVER-MINOR) inspector: new API - Session.connectToMainThread (Eugene Ostroukhov)
- lib: remove the use of util.isFunction (himself65)
- (SEMVER-MINOR) lib,test: fix error message check after V8 update (Michaël Zasso)
- module: error for CJS .js load within type: module (Guy Bedford)
- module: reintroduce package exports dot main (Guy Bedford)
- n-api: delete callback bundle via reference (Gabriel Schulhof)
- n-api: mark version 5 N-APIs as stable (Gabriel Schulhof)
- perf_hooks: remove non-existent entries from inspect (Kirill Fomichev)
- perf_hooks: ignore duplicated entries in observer (Kirill Fomichev)
- perf_hooks: remove GC callbacks on zero observers count (Kirill Fomichev)
- perf_hooks: import http2 only once (Kirill Fomichev)
- policy: minor perf opts and cleanup (Bradley Farias)
- (SEMVER-MINOR) process: initial SourceMap support via NODE_V8_COVERAGE (Benjamin Coe)
- process: use public readableFlowing property (Chetan Karande)
- repl: convert var to let and const (Lucas Holmquist)
- repl: fix bug in fs module autocompletion (zhangyongsheng)
- repl: add autocomplete support for fs.promises (antsmartian)
- repl: add missing variable declaration (Lucas Holmquist)
- src: perform check before running in runMicrotasks() (Jeremy Apthorp)
- src: discard remaining foreground tasks on platform shutdown (Anna Henningsen)
- src: fix closing weak HandleWraps on GC (Anna Henningsen)
- src: use libuv to get env vars (Anna Henningsen)
- src: re-delete Atomics.wake (Gus Caplan)
- src: print exceptions from PromiseRejectCallback (Anna Henningsen)
- src: modified RealEnvStore methods to use libuv functions (Devendra Satram)
- src: make ELDHistogram a HandleWrap (Anna Henningsen)
- src: check microtasks before running them (Shelley Vohr)
- src: fix ValidateDSAParameters when fips is enabled (Daniel Bevenius)
- (SEMVER-MINOR) src: update v8abbr.h for V8 7.7 (cjihrig)
- (SEMVER-MINOR) src,lib: expose memory file mapping flag (João Reis)
- stream: add test for multiple .push(null) (Chetan Karande)
- stream: cleanup use of internal ended state (Chetan Karande)
- (SEMVER-MINOR) stream: make _write() optional when _writev() is implemented (Robert Nagy)
- stream: apply special logic in removeListener for readable.off() (Robert Nagy)
- stream: do not call _read() after destroy() (Robert Nagy)
- stream: optimize creation (Robert Nagy)
- stream: simplify isUint8Array helper (Anna Henningsen)
- test: fix race condition in test-worker-process-cwd.js (Ruben Bridgewater)
- test: fix flaky test-inspector-connect-main-thread (Anna Henningsen)
- test: unmark test-worker-prof as flaky (Anna Henningsen)
- test: improve test-worker-message-port-message-before-close (Anna Henningsen)
- test: disable core dumps before running crash test (Ben Noordhuis)
- test: permit test-signalwrap to work without test runner (Rich Trott)
- test: remove flaky status for test-statwatcher (Rich Trott)
- (SEMVER-MINOR) test: update postmortem metadata test for V8 7.7 (cjihrig)
- timers: set _destroyed even if there are no destroy-hooks (Jeremiah Senkpiel)
- (SEMVER-MINOR) tls: add option to override signature algorithms (Anton Gerasimov)
- tools: cleanup getnodeversion.py for readability (Christian Clauss)
- tools: update ESLint to 6.4.0 (zhangyongsheng)
- tools: fix iculslocs to support ICU 65.1 (Steven R. Loomis)
- tools: python3 compat for inspector code generator (Ben Noordhuis)
- tools: delete v8_external_snapshot.gypi (Ujjwal Sharma)
- tools: fix GYP ninja generator for Python 3 (Michaël Zasso)
- (SEMVER-MINOR) tools: sync gypfiles with V8 7.7 (Michaël Zasso)
- tty: add color support for mosh (Aditya)
- util: include reference anchor for circular structures (Ruben Bridgewater)
- (SEMVER-MINOR) util: add encodeInto to TextEncoder (Anna Henningsen)
- (SEMVER-MINOR) worker: mark as stable (Anna Henningsen)
- worker: make terminate() resolve for unref’ed Workers (Anna Henningsen)
- worker: prevent event loop starvation through MessagePorts (Anna Henningsen)
- worker: make transfer list behave like web MessagePort (Anna Henningsen)

O&O SafeErase Professional 14.5 Build 531 (64-bit) 查看版本資訊

更新時間:2019-09-20
更新細節:

WYSIWYG Web Builder 15.1.0 查看版本資訊

更新時間:2019-09-20
更新細節:

What's new in this version:

WYSIWYG Web Builder 15.1.0
Fixed:
- Text Menu does not remember 'responsive' option
- Text with 'Enable Responsive Fonts' uses line-height of default view in breakpoints

Improved:
- Moved preloader <div> before scripts at the end of the page
- Panel Menu - Button Icon will now also be published as SVG if 'Publish navigation icons as SVG image' is enabled
- Panel Menu - Button Icon now supports all Icon Libraries (in addition to FontAwesome/Material Icons)
- Added '-webkit-appearance: none' to buttons, so Safari will render the buttons as intended
- Meta data of images in the photo gallery is now loaded on demand. This solves an issue where images are not displayed when the meta data is corrupt
- Added 'Unsplash Photo' icon to the toolbox, so you can quickly drag & drop an Unsplash Photo to the page


WYSIWYG Web Builder 15.0.7
Fixed:
- Icon Font publishes font files for SVG format
- FlipSwitch issue with rtl
- UI 'freeze' when rendering text using HDC (fallback) in embedded page with breakpoints
- Clipping issue with box shadow rendering
- Issue with 'Reset background color' and text in a container
- Issue with styles in output format
- Issue with Image filename change via Property Inspector
- Crash when publishing modified files only
- Issue with FlexBox Container and max-width
- Incorrect filename for Unsplash images when using filters

Improved:
- Added z-index to Shape dividers in flex container
- Optimized memory management during publishing


WYSIWYG Web Builder 15.0.6
Fixed:
- Switched 'disable' and 'enable' labels in events
- Texture background not saved for Banner
- Go Menu does not render initial text in workspace
- Border image uses wrong size

Improved:
- Border width calculations for floating images
- Catch possible conflicts with pipe-characters in Unsplash text
- Redesigned link implementation for in output format (better support for Unicode and style filter)


WYSIWYG Web Builder 15.0.5
- Fixed: Issue with text-alignment in Image watermark
- Fixed: Shape divider not rendered when used on master page
- Fixed: Invalid image size when using gaussian blur
- Fixed: Issue with FlipSwitch 'Name' property
- Fixed: Image shadow ignores opacity setting
- Fixed: script library not included for Card events
- Improved: Shadow rendering with border radius
- Improved: Several improvements to optimize table rendering performance
- Improved: Added experimental support for Input Method Editor (IME) to input Chinese/Japanese/Korean characters
- Improved: Added experimental support for changing the text color of multiple table cells (using shift+cell properties)
- 'experimental' means that the feature is still under development, but is already enabled to allow users to try it out


WYSIWYG Web Builder 15.0.4
- Change log not available for this version


WYSIWYG Web Builder 15.0.2
Fixed:
- Category text of Mega menu uses the wrong font-family
- Issue with text in breakpoints and 'random' preview crash
- Rendering issue with nested layers and clipping
- Card Container Carousel issue when page language direction is set to 'right-to-left'
- Card Container Carousel issue with Chrome browser on page load
- Issue with flipped shapes
- 'Deadlock' when using rare combination of embedded page, text and breakpoints
- UI focus issue when using text in flexgrid with breakpoints

Improved:
- Auto size functionality of text in edit mode now works the same as in previous versions


WYSIWYG Web Builder 15.0.1
Fixed:
- Rendering issue with image
- Rendering issue with Google Font variant
- Some older projects do not loa
- Issue with lazy loa
- Object outlines not rendere
- Rendering issue with 'condensed' and narrow' fonts
- Issue editing text in table
- Image frame in breakpoints not upgraded to border fram
- Crash when switching quickly between breakpoints (related to blog/article
- Text height not updated when switching to another breakpoint or scalin
- 'most downloads' error when open CMS search properties
- Some extensions are not rendered at the right positio
- Photo gallery renders long titles without ellipses like in previous versions
- Alignment issue in response Carouse
- Colorize not implemented in Navigation Bar
- (deprecated) Text line spacing options not DPI aware
- Issue with merging image and shadow
- Category text of Mega menu uses the wrong font-family

Improved:
- anti-aliasing can now be turned off for shape border

Node.js 12.10.0 (64-bit) 查看版本資訊

更新時間:2019-09-05
更新細節:

What's new in this version:

Notable changes:
deps:
- Update npm to 6.10.3 (isaacs)

fs:
- Add recursive option to rmdir() (cjihrig)
- Allow passing true to emitClose option (Giorgos Ntemiris)
- Add *timeNs properties to BigInt Stats objects (Joyee Cheung)

net:
- Allow reading data into a static buffer

Commits:
- bootstrap: run preload prior to frozen-intrinsics
- buffer: correct indexOf() error message
- buffer: consolidate encoding parsing
- buffer: correct concat() error message
- buffer: improve equals() performance
- Revert "build: add full Python 3 tests to Travis CI"
- build: add full Python 3 tests to Travis CI
- build: hard code doctool in test-doc target
- build: integrate DragonFlyBSD into gyp build
- build: make --without-snapshot imply --without-node-snapshot
- build: test Python 3.6 and 3.7 on Travis CI
- build: move tooltest to before jstest target
- build: add Python 3 tests to Travis CI
- build,win: accept Python 3 if 2 is not available
- build,win: find Python in paths with spaces
- console: use getStringWidth() for character width calculation
- crypto: don't expose openssl internals
- crypto: simplify DSA validation in FIPS mode
- deps: V8: cherry-pick 597f885
- (SEMVER-MINOR) deps: update npm to 6.10.3
- doc: escape elements swallowed as HTML in markdown
- doc: add extends for derived classes
- doc: add blanks around code fences
- doc: format http2 anchor link and reference
- doc: remove multiple consecutive blank lines
- doc: add devnexen to collaborators
- doc: inconsistent indentation for list items
- doc: heading levels should only increment by one
- doc: add dco to github pr template
- doc: add https.Server extends tls.Server
- doc: fix nits in esm.md
- doc: add missing extends Http2Session
- doc: indicate that Http2ServerRequest extends Readable
- doc: indicate that Http2ServerResponse extends Stream
- (SEMVER-MINOR) doc: add emitClose option for fs streams
- doc,crypto: add extends for derived classes
- doc,errors: add extends to derived classes
- doc,fs: add extends for derived classes
- doc,http: add extends for derived classes
- doc,tls: add extends for derived classes
- errors: provide defaults for unmapped uv errors
- esm: support loading data URLs
- events: improve once() performance
- (SEMVER-MINOR) fs: add recursive option to rmdir()
- (SEMVER-MINOR) fs: allow passing true to emitClose option
- fs: fix (temporary) for esm package
- fs: document the Date conversion in Stats objects
- (SEMVER-MINOR) fs: add *timeNs properties to BigInt Stats objects
- gyp: remove semicolons (Python != JavaScript)
- gyp: futurize imput.py to prepare for Python 3
- http: simplify timeout handling
- lib: add ASCII fast path to getStringWidth()
- lib: consolidate lazyErrmapGet()
- module: avoid passing unnecessary loop reference
- (SEMVER-MINOR) net: allow reading data into a static buffer
- process: improve nextTick performance
- querystring: improve performance
- src: do not crash when accessing empty WeakRefs
- src: turn GET_OFFSET() into an inline function
- src: inline SLICE_START_END() in node_buffer.cc
- src: allow --interpreted-frames-native-stack in NODE_OPTIONS
- src: expose MaybeInitializeContext to allow existing contexts
- src: add large page support for macOS
- stream: don't deadlock on aborted stream
- stream: improve read() performance
- stream: async iterator destroy compat
- stream: do not emit drain if stream ended
- test: remove Windows skipping of http keepalive request GC test
- test: fix test-benchmark-net
- test: fix flaky test-http-server-keepalive-req-gc
- test: use print() function in both Python 2 and 3
- (SEMVER-MINOR) test: add emitClose: true tests for fs streams
- tools: update ESLint to 6.3.0
- tools: use 'from io import StringIO' in ninja.py
- tools: fix mksnapshot blob wrong freeing operator
- tools: update ESLint to 6.2.2
- tools: update babel-eslint to 10.0.3
- tools: fix Python 3 issues in inspector_protocol
- tools: fix mixup with bytes.decode() and str.encode()
- tools: fix Python 3 issues in tools/icu/icutrim.py
- tools: fix Python 3 issues in gyp/generator/make.py
- util: do not throw when inspecting detached ArrayBuffer

Node.js 12.9.1 (64-bit) 查看版本資訊

更新時間:2019-08-27
更新細節:

Node.js 12.9.0 (64-bit) 查看版本資訊

更新時間:2019-08-21
更新細節:

What's new in this version:

Changes:
Crypto:
- Added an oaepHash option to asymmetric encryption which allows users to specify a hash function when using OAEP padding

Deps:
- Updated V8 to 7.6.303.29
- Improves the performance of various APIs such as JSON.parse and methods called on frozen arrays
- Adds the Promise.allSettled method
- Improves support of BigInt in Intl methods
- Updated libuv to 1.31.0
- UV_FS_O_FILEMAP has been added for faster access to memory mapped files on Windows
- uv_fs_mkdir() now returns UV_EINVAL for invalid filenames on Windows. It previously returned UV_ENOENT
- The uv_fs_statfs() API has been added
- The uv_os_environ() and uv_os_free_environ() APIs have been added

Fs:
- Added fs.writev, fs.writevSync and filehandle.writev (promise version) methods. They allow to write an array of ArrayBufferViews to a file descriptor

Http:
- Added three properties to OutgoingMessage.prototype: writableObjectMode, writableLength and writableHighWaterMark

Stream:
- Added an new property readableEnded to readable streams. Its value is set to true when the 'end' event is emitted
- Added an new property writableEnded to writable streams. Its value is set to true after writable.end() has been called

Node.js 12.8.1 (64-bit) 查看版本資訊

更新時間:2019-08-16
更新細節:

What's new in this version:

Fixed:
- “Data Dribble”: The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both, potentially leading to a denial of service.
- “Ping Flood”: The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both, potentially leading to a denial of service.
- “Resource Loop”: The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU, potentially leading to a denial of service.
- “Reset Flood”: The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both, potentially leading to a denial of service.
- “Settings Flood”: The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both, potentially leading to a denial of service.
- “0-Length Headers Leak”: The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory, potentially leading to a denial of service.
- “Internal Data Buffering”: The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually write (many of) the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the servers queue the responses, this can consume excess memory, CPU, or both, potentially leading to a denial of service.
C- “Empty Frames Flood”: The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSH_PROMISE. The peer spends time processing each frame disproportionate to attack bandwidth. This can consume excess CPU, potentially leading to a denial of service.

Node.js 12.8.0 (64-bit) 查看版本資訊

更新時間:2019-08-07
更新細節:

What's new in this version:

Assert:
- Legacy mode deprecation (DEP0089) is revoked

Crypto:
- The outputLength option is added to crypto.createHash
- The maxmem range is increased from 32 to 53 bits

N-api:
- Added APIs for per-instance state management

Report:
- Network interfaces get included in the report

Src:
- V8.getHeapCodeStatistics() is now exported

O&O SafeErase Professional 14.3 Build 469 (64-bit) 查看版本資訊

更新時間:2019-07-26
更新細節: