1Password for Windows

What's new in this version:

Basilisk Browser 2019.09.12 (64-bit)
- Fixed an issue where saving a webpage to disk would sometimes drop tags from the document
- Fixed an issue with click-to-play plugin content throwing up a blank notification
- Fixed an issue in the renderer where region intersections would sometimes return the wrong result
- This fixes a regression caused by the fix for CVE-2016-5252
- Fixed security issues: CVE-2019-11744, CVE-2019-11752, CVE-2019-11737, CVE-2019-11746, CVE-2019-11750, CVE-2019-11747 and CVE-2019-11738
- Unified XUL Platform Mozilla Security Patch Summary: 7 fixed, 1 DiD, 1 already covered, 22 not applicable


Basilisk Browser 2019.09.03 (64-bit)
- Implemented JavaScript parser improvements and several TC39 spec revisions for web compatibility
- Improved performance of the JavaScript engine
- Added support for gzip-compressed SVG-in-Opentype fonts
- Updated internationalization code to support updated time zones and the Japanese Reiwa era
- Updated NSS to a custom version to have better encryption strength for master passwords
- Added several performance improvements to DOM, the rendering engine and the parser
- Improved general security of access to FTP-sourced resource
- Changed the way file access is handled from scripts to prevent cross-file access
- Fixed SVG alignment issues causing blurry display of SVGs
- Added support for Matroska media containers and AAC audio
- Fixed security issues: CVE-2019-11719, CVE-2019-11711, CVE-2019-11715, CVE-2019-11717, CVE-2019-11714 (DiD), CVE-2019-11729 (DiD), CVE-2019-11727 (DiD), CVE-2019-11730 (DiD), CVE-2019-11713 (DiD) and several networking and memory-safety hazards that do not have CVE numbers.
- Fixed several memory safety hazards and crashes


Basilisk Browser 2019.06.08 (64-bit)
- Removed unused code: contextual identity, crash reporter leftovers, SecurityUI telemetry, "enhanced" new tab tiles
- Updated the installer and internal updater
- Removed all Firefox Accounts code and replaced the Sync client for compatibility
- Implemented JavaScript parser improvements and the TC39 toString() revision proposal for web compatibility
- Improved handling of url() tokens in CSS to better handle incorrect syntax
- Updated the embedded emoji font for broader emoji coverage
- Fixed print failure for some web pages
- Fixed Linux XRender performance issues over remote connections (e.g. X2Go)
- Improved JavaScript engine performance: dead compartment collection
- Fixed an address bar focus issue in Private Browsing mode
- Improved rendering performance for certain websites (with complex event regions)
- Implemented several ECMAScript 2019 features (String trimStart/trimEnd, Array flat/flatMap, Symbol description
- Fixed security issues: CVE-2019-7317, CVE-2019-11701, CVE-2019-11698, CVE-2019-9817 (DiD), CVE-2019-11700, CVE-2019-11696 and CVE-2019-11693
- Fixed several memory safety hazards and crashes


Basilisk Browser 2019.03.27 (64-bit)
- Added several site-specific overrides for web compatibility
- Aligned http "Accept:" headers with the fetch spec, with the exception of image requests to continue allowing content negotiation
- Fixed potential denial-of-service issues involving FTP (loading of subresources and spamming errors)
- Aligned URLSearchParams with the spec
- Fixed a corner case for flexbox layouts, improving rendering of some websites
- Fixed Widevine compatibility issues
- Fixed security issues: CVE-2019-9791, CVE-2019-9792, CVE-2019-9796, CVE-2019-9801, CVE-2019-9793, CVE-2019-9794, CVE-2019-9808, CVE-2019-9790, CVE-2019-9797, CVE-2019-9804 and ZDI-CAN-8368
- Fixed several memory safety hazards and crashes
- Windows binaries are now code-signed again (including the setup program for the installer)


Basilisk Browser 2019.03.08 (64-bit)
- Changed location to allow an empty string set on search to clear URL parameters
- Removed WebExtension support from the platform
- Implemented the "origin-clean" algorithm for ImageBitmap
- Switched to using C++11 thread-safe statics in the entire application
- Fixed several Skia security vulnerabilities (CVE-2018-18356, CVE-2018-18335 and CVE-2019-5785)
- Fixed a crash due to frames in some uncommon situations
- Aligned textarea placeholder strings with the spec (preserve line breaks)
- Removed the Windows maintenance service code
- Improved http basic auth DOS protection heuristics
- Fixed arrows on some toolkit controls
- Added a Netflix site-specific override to fix Silverlight playback


Basilisk Browser 2019.02.11 (64-bit)
- Removed experimental WebExtension support from the browser
- Please check your add-ons; you may need to find alternatives for extensions that are no longer supported
- For background to this change, please see the following forum announcement
- Removed more telemetry code from the platform
- Finalized spec compliance of the IntersectionObserver API, and enabled it by default
- Related this, also fixed a number of browser crashes
- Switched to the new ffmpeg decode API to avoid dropping of frames
- Removed Mozilla-proprietary AudioContext constructor, improving spec compliance of WebAudio
- Aligned Element.ScrollIntoView() with the spec
- Fixed a buffering issue in the WebP decoder that caused intermittent browser crashes
- Changed the Add-on Manager to the same one used by Pale Moon, unifying add-on handling
- Note: Some extensions that modify/style the Add-on Manager will have to be updated to work with Basilisk 2019 versions as a result
- Improved resource-efficiency for internal stopwatch timers
- Improved handling of incorrectly-encoded CTTS in media files, resolving some playback issues of videos
- Updated SQLite lib to 3.26
- Improved the Cycle Collector and Garbage Collector
- Set the Incremental Garbage Collection time slice to 20 ms for more efficient JavaScript memory handling (regression fix)
- Improved fullscreen navigation bar handling in the situation it has focus when switching to full screen
- Aligned instanceof with the final ES6 spec
- Fixed a potential use-after-free in IndexedDB code
- Improved proxy handling to avoid localhost getting proxied
- Fixed several potentially-exploitable memory safety hazards and crashes
- Improved Windows DIB clipboard data handling


Basilisk Browser 2018.12.18 (64-bit)

- Added a preference (network.http.upgrade-insecure-requests) to allow disabling requests for opportunistic encryption
- Removed more telemetry code from the platform
- Added experimental support for the AV1 video codec for MP4 containers (disabled by default)
- Cleaned up some media handling code, removing obsolete components for older target platforms
- Ported all applicable security fixes from Gecko/64. Most of these fixes were merely defense-in-depth
- Fixed a crash when using http pipelining over some broken proxies
- Enhanced the WebP decoder to properly handle animated lossy and lossless WebP
- Removed VR hardware support (both display and input types) from the platform
- Updated the GMP update service URL to improve compatibility with DRM-encumbered media
- Removed support for Firefox Accounts and changed the Sync client to work with Sync 1.1 (Weave)
- The default server for using Sync is now the Pale Moon Sync server
- Please see this announcement on the forum for more details
- Updated NSPR to 4.20
- Updated NSS to 3.41, finalizing our platform support for TLS 1.3
- Fixed a spec compliance issue with the location.protocol setter


Basilisk Browser 2018.11.07 (64-bit)
- Fixed an issue that prevented the browser from starting properly on some systems after the most recent update


Basilisk Browser 2018.11.04 (64-bit)
- Removed more telemetry code from the platform
- Updated libnestegg from upstream
- Updated ffvpx library from upstream
- Web dev: Make all arguments to init*Event() optional except the first
- Ported all applicable security fixes from Gecko/63 and intermediate point releases
- Fixed an issue in session storage scripting that might prematurely throw an error and interrupt session restore
- Resolved an issue with long menus not scrolling if a submenu was open
- Cleaned up and updated some installer code
- Made caret width normal/thick behind CJK char configurable
- Fixed an issue with table border scaling at various zoom levels
- Updated handling of multimedia (on-going)
- Fixed a corner case behavioral issue when an Outlook-sourced mail message is dropped to the browser
- Removed the unfinished and disabled in-browser translation code
- Updated the Reader View components
- Added experimental AV1 support for WebM videos (disabled by default)
- Note: This is limited to WebM videos only at the moment, so it will not yet work on MP4 videos or MSE streaming (e.g. YouTube)
- Fixed an issue with CSS grid element sizing
- Updated sidebar conext menu behavior to be more in line with other browsers
- Fixed an issue where a separate content process could be launched despite e10s being disabled
- Disabled the reporting of CSS errors to the console by default to improve general performance


Basilisk Browser 2018.09.27 (64-bit)
- This is a development and security release
- Added support for local-ref URLs in SVG USE elements
- Reinstated part of the searchplugin API that was removed by Mozilla, improving compatibility with search-engine modifying extensions
- Improved compiler compatibility with GCC 8
- Ported all applicable security patches from Gecko/62
- Fixed wrong SVG sizes with non-integer values for viewBox width/height
- Fixed a performance regression when many workers are in use simultaneously
- Improved browser session restore speed by skipping unnecessary notifications
- Fixed a crash with http authentication
- Fixed a performance issue caused by rapid-fire timers due to value overflow
- Fixed an issue with launching executable files not working
- ixed an issue where sites allowed to store offline data could not be Fremoved from the permission list
- Fixed an issue with common dialog boxes having incorrect sizes for their content
- Fixed a regression: ICC v4 color profiles would not be honored
- Remove the blocking of binary components in extensions
- Added a preference to enable (experimental!) asynchronous panning and zooming on desktop
- Fixed a potential crash when using SOCKS
- Fixed a potential privacy issue in non-standard environments
- Fixed a memory leak when using SHA256 crypto