Pale Moon (32-bit) 歷史舊版本 Page1

更新時間：2020-08-04
更新細節：

What's new in this version:

Changes/fixes:
- Added controls for WASM to the browser's preferences, and enabled by default
- Enabled various arbitrarily-disabled CSS functions
- Added the use of basic path descriptors (i.e. polygon) to css clip paths
- Implemented multithreaded request signal handling for the Abort API. Please see implementation notes below
- Updated the included US-English dictionary, adding approximately 2500 additional words
- Removed the DOM battery API. This was already disabled for privacy reasons for a long while
- Fixed an erroneous warning displayed on toolkit-only add-ons like supplied dictionaries
- Fixed an issue with the sessionstore tab load preference
- Improved the generation of the names of downloaded files to prevent confusion
- Fixed a code issue with base64 encoding of data
- Fixed 2 safety hazards in JavaScript
- Fixed a spec compliance issue with regards to the cross-origin loading of scripts
- Improved the loading of a system DLL on Windows, preventing low-risk hijacking
- Unified XUL Platform Mozilla Security Patch Summary: 4 fixed, 2 defense-in-depth, 15 not applicable

Implementation notes:
- In 28.11.0, we introduced the Abort API as new code. The implementation of it still had an issue where especially web workers would not always see the availability of abort signals on fetch requests while AbortSignal was implemented in the browser. This effectively made some websites (especially those using a particular polyfill for the Abort API that would detect the need to polyfill by way of Request.signal) throw errors that were fine before. We offered users a workaround by temporarily disabling the AbortController in the browser by way of a preference (dom.abortController.enabled).
- v28.12.0 fixes the multi-threaded handling of signals, which should solve these problems. As such, the workaround is no longer needed and upon upgrade the preference will be reset to enable AbortControllers again.
- DLL-hijacking on Windows would only be possible if a malicious actor already either gained administrative access to the program's installation folder or otherwise have unrestricted access to the program folder (by having it installed in local application folders inside the user's profile space or other insecure program locations). In that case the system is already compromised and any executable can be replaced, so having dll loading hijacked would be the least of your concerns (i.e. the main program .exe could also be replaced/infected in that case).

更新時間：2020-08-04
更新細節：

更新時間：2020-07-14
更新細節：

What's new in this version:

Changes/fixes:
- Changed storage format for certificates and passwords to SQLite
- Added a preference (browser.tabs.insertAllAfterCurrent) to enable always adding new tabs after the current tab, whether related or not
- Changed the way Firefox extensions are displayed in the add-on manager (provide a clear warning)
- Denied other types of add-ons that aren't explicitly targeting Pale Moon's ID
- Improved the browser's DPI-awareness to be per-monitor instead of system-wide, on supported Windows operating systems
- Updated bookmark backups code with the other half of what should have been done way back when, so they work fully as-intended
- Added a preference (browser.bookmarks.editDialog.showForNewBookmarks) to enable immediately showing the edit dialog for new bookmarks
- If set to true, clicking the star in the address bar will pop open the edit dialog immediately for changing details/sorting
- Fixed the useragent string in native mode, and updated UA code to properly respond to live changes to some preferences
- Tidied up front-end browser JavaScript
- Changed the way sources are compiled (on-going de-unification)
- Improved compatibility with gcc v10
- Removed support for the obsolete and unmaintained NVidia 3DVision stereoscopic interface
- Fixed some build issues in non-standard configurations
- Fixed wrong positions when calculating the position for position:absolute child inside a table
- Aligned file name extension of saved url files with other applications (lower case)
- Fixed building with --disable-webspeech (to disable speech synthesis)
- Added global menubar support for GTK
- Implemented node.getRootNode
- Implemented AbortController (Abort API)
- Improved the uninstaller to use elevation when prudent and actually remove program files
- Fixed a rare issue with editable page content
- Fixed a crash related to ES module scripts
- Aligned ES module scripting better with the current spec and removed eager instantiation
- Fixed a potential issue with the JPEG encoder
- Fixed a potential issue with AppCache manifests
- Fixed a potential crash in JavaScript date parsing
- Fixed a problem with RSA key generation that would make it potentially vulnerable to side-channel attacks
- Fixed a potential crash due to multithread race condition
- Fixed a correctness issue in URL handling
- Unified XUL Platform Mozilla Security Patch Summary: 2 fixed, 4 defense-in-depth, 10 not applicable

更新時間：2020-06-05
更新細節：

What's new in this version:

- Implemented URLSearchParams' sort() function
- Implemented ES2020 globalThis for web compatibility
- Improved our WebM media parser to be more tolerant to different encoding styles
- Improved our MP3 media parser to be more tolerant to different encoding styles and particularly tiny files/stream chunks
- Improved performance of table drawing for more corner cases
- Changed the way images without a src are handled in page layouts to align with the Chrome-pushed spec
- Added modern MIPS support
- Split out the ICU data file from xul.dll on Windows
- Fixed a regression in WebAudio channel handling due to a landed security fix
- Fixed a regression preventing scripting from properly disabling input controls
- Fixed an issue with border radius sometimes not being honored in tables
- Fixed some build issues in non-standard configurations
- Removed more telemetry code
- Removed the in-browser speech recognition engine and API
- Removed support for the obsolete and unmaintained NVidia 3DVision stereoscopic interface
- Changed handling of braille blanks in the ui
- Mitigated a potential timing attack against DSA keys in NSS
- Unified XUL Platform Mozilla Security Patch Summary: 1 fixed, 1 defense-in-depth, 8 not applicable

更新時間：2020-05-25
更新細節：

更新時間：2020-05-19
更新細節：

更新時間：2020-05-13
更新細節：

更新時間：2020-05-08
更新細節：

What's new in this version:

- Fixed a potential vulnerability in the zip file reader. DiD
- Fixed a potential vulnerability in the JavaScript JIT compiler related to aliases. DiD
- Ported several upstream devtools fixes
- Improved memory safety of some WebAudio calls
- Improved memory safety in the XUL window destructor. DiD
- Unified XUL Platform Mozilla Security Patch Summary: 3 fixed, 3 Defense-in-depth, 16 not applicable

更新時間：2020-04-30
更新細節：

What's new in this version:

- Re-based the 28.9 version of browsers on a separate development branch that excludes the extensive work being done for Google WebComponents, to avoid potential performance and stability issues caused by as-of-yet incomplete and in-progress code for the new milestone.
- Enabled DOM High Resolution timestamps for compatibility with websites that strictly rely on them for operation.
- Added a preference to allow copying the unescaped URL from the address bar (especially useful for internationalized domain names and paths). To enable this, set browser.urlbar.decodeURLsOnCopy to true in about:config
- Fixed several application crashes

更新時間：2020-04-15
更新細節：