Pale Moon (64-bit) 歷史版本列表
更新時間：2023-03-09
更新細節：
What's new in this version:
- Add the new app.formatStr() method. This method is quite useful since allows to format a string easily. For example, it's possible to call the method with a string like "My name is {0} and my last name is {1}" and get a returned formatted string like "My name is John and my last name is Doe".
- Apply a background color and text color according to the used theme in the DecSoft BlockUI app plugin. This change means that the block UI message appears with the right background color and text color no matter if we are using the "light" theme color mode or the "dark" color mode in the app.
- Update the jQuery JavaScript library to the latest version. This means that the jQuery JavaScript library used in the app template has been updated, but also the jQuery JavaScript library used in the product "read me" file, the product About page, the product Welcome page, the product help and the "out of the box" app plugins helps.
更新時間：2023-02-26
更新細節：
What's new in this version:
- Update VueJS to the latest version (3.2.47). This latest version of Vue includes lot of minor changes, fixes and enhancements. Also update the Pinia JavaScript library to the latest version (2.0.32).
- Make some other minor internal changes, fixes and enhancements over the DecSoft App Builder IDE
更新時間：2023-02-21
更新細節：
What's new in this version:
Changes/fixes:
- Fixed a crash in the new regular expression code
- Added {Extended_Pictographic} unicode property escape to regular expressions
- Fixed a regression in regular expressions for literal parsing of invalid ranges
- Updated NSS to pick up fixes
- Security issues addressed: CVE-2023-25733 DiD, CVE-2023-25739 DiD and CVE-2023-0767
- UXP Mozilla security patch summary: 1 fixed, 2 DiD, 14 not applicable
更新時間：2023-01-25
更新細節：
更新時間：2023-01-24
更新細節：
What's new in this version:
- Implemented Regular Expression named capture groups
- Implemented Regular Expression unicode property escapes
- Re-implemented Regular Expression lookaround/lookbehind (without crashing this time ;) )
- Implemented progressive decoding for JPEG-XL
- Implemented animation for JPEG-XL
- Renamed CSS offset-* properties to inset-* to align with the latest spec and the web
- Fixed CSS inheritance and padding issues in some cases
- Aligned parsing of incorrectly duplicated HSTS headers with expected behavior (discard all but the first one)
- Implemented a method to avoid memory exhaustion in case of (very) large resolution animated images
- Updated the JPEG-XL and Highway libraries to a recent, stable version
- Cleaned up some unused CSS prefixing code
- Improved the ability to link on *nix operating systems with other linkers than gcc's default
- Stability improvements (potential crash fixes)
- Security issues addressed: CVE-2023-23598, CVE-2023-23599 and several others that do not have a CVE number
- UXP Mozilla security patch summary: 4 fixed, 2 DiD, 19 not applicable
更新時間：2022-12-20
更新細節：
What's new in this version:
Changes/fixes:
- Fixed JPEG-XL's transparency display for images with an alpha channel
- Temporarily removed regex lookbehind to stop crashes occurring on 32-bit builds of the browser
- Added some extra sanity checks to our zip/jar/xpi reader to avoid issues with corrupt archives
- Aligned cookie checks with RFC 6265 bis. See implementation notes
- Removed obsolete code in Windows widgets that could cause potential issues with long paths and file names on supported versions
- Fixed several crashes
- Security issues addressed: CVE-2022-46876, CVE-2022-46874 and several others that do not have a CVE number
- UXP Mozilla security patch summary: 4 fixed, 20 not applicable
Implementation notes:
- RFC 6265 has been worked on with draft changes describing how cookies are actually being handled in the real world, in the bis versions of the RFC. While these changes have not yet been finalized, browsers in general do adhere to the latest available bis version of this RFC. Specifically, the long-standing exceptions for cookie names and values have been formalized, e.g. having quoted values. Our behavior has changed in that we now once again accept Tab characters (0x09) which is the one excluded control character from the range that is otherwise forbidden. We also no longer apply these checks exclusively to those in http headers, and any way of setting cookies must now adhere to the valid range. Cookies that fail these range checks for valid characters will be ignored.
更新時間：2022-12-20
更新細節：
更新時間：2022-12-08
更新細節：
更新時間：2022-11-29
更新細節：
What's new in this version:
Fixed:
- wrong color of decoded JPEG-XL images
- and issue with plugins not receiving keypress events properly
更新時間：2022-11-29
更新細節：
What's new in this version:
- Added: LAN-14405 Show warning message to use Modern Authentication in case Basic Authentication is used for mailing.
Fixed:
- LAN-14424 vCenter scanning – vMotion data cannot be scanned after an upgrade
- LAN-13908 Cross-site scripting (XSS) issue
- LAN-13907 Directory traversal issue
- LAN-13906 Cross-site scripting (XSS) issue
- LAN-13904 Directory traversal issue
- LAN-13903 Directory traversal issue
- LAN-13901 Directory traversal issue