Quip for Desktop 歷史版本列表
更新時間：2022-01-26
更新細節：
更新時間：2022-01-24
更新細節：
What's new in this version:
- Fixed an issue where '' is added to the DestDir even if there is no '' at the end of the DestDir in command line specification
更新時間：2022-01-19
更新細節：
What's new in this version:
Added:
- added Portuguese of Portugal on Plus UI (by JNylson, isaak654, mpheath)
- added "BreakoutProcess=program.exe", with this option selected applications can be started unboxed from within a box
- the program image must be located outside the sandbox for this to work
- if another sandbox has "ForceProcess=program.exe" configured, it will capture the process
- use case: set up a box with a Web browser forced, when another box opens a website, this will happen in the dedicated browser box
- Note: "BreakoutFolder=somepath" is also available
- added silent uninstall switch /remove /S for Classic installer
Changed:
- The filename "sandman_pt" was changed to "sandman_pt_BR" (Brazilian Portuguese)
- The filename "sandman_ua" was changed to "sandman_uk" (Ukrainian)
- Note: Translators are encouraged to follow the Localization notes and tips before creating a new pull request
- updated Firefox update blocker
Fixed:
- issue with opening all file access OpenFilePath=*- issue with opening network shares
- possible upgrade issue with Classic installer 130c43a
- minor issues with Classic installer
- issue with Ldr_FixImagePath_2
- when using "Run Sandboxed" with SandMan UI and the UI is off, it wil stay off
- issue with Util_GetProcessPidByName that should resolve the driver sometimes failing to start at boot
- SandMan will now run in background like SbieCtrl when starting a boxed process post506
- taskbar not showing with persistent box border in full screen post474
- box border not spanning across multiple monitors
- issues with border when using DPI scaling
- DPI issues with Qt
- issue with bright flashing on window creation when in dark mode
- issues with the PortableRootDir setting
- issue with the settings window crashing when the driver was not connected
- DPI issues with Finder Tool
- another issue with reused process IDs
- issue introduced in 1.0.6 related to SeAccessCheckByType
更新時間：2022-01-08
更新細節：
What's new in this version:
Added:
- added experimental option "CreateToken=y" to create a new token instead of repurposing an existing one
- added option "DisableRTBlacklist=y" allowing to disable the hardcoded runtime class blacklist
- added new template "DeviceSecurity" to lock down access to device drivers on the system
- Note: This template requires RuleSpecificity being available to work properly
- added option to set a custom ini editor in the Plus UI
- added option "LingerLeniency=n" to solve issue
Changed:
- reworked syscall invocation code in the driver
- Win32k hooking is now compatible with HVCI #1483
Fixed:
- memory leak in driver (conf_user.c)
- issue with file renaming in open paths introduced in 1.0.6
- issue causing Chromium browsers not closing properly
- issue with start.exe
- SandMan issue with reused process IDs
- KmdUtil sometimes not properly terminating the driver
Removed:
- removed OpenToken as it is only a shorthand for UnrestrictedToken=y and UnfilteredToken=y set together
更新時間：2021-12-29
更新細節：
更新時間：2021-12-26
更新細節：
What's new in this version:
Added:
- sandbox top level exception handler to create crash dumps
- it can be enabled per process or globally using "EnableMiniDump=process.exe,y" or "EnableMiniDump=y" respectively
- the dump flags can be set as hex with "MiniDumpFlags=0xAABBCCDD"
- a preselected flag set for a verbose dump can be set with "MiniDumpFlags=Extended"
- Note: created dump files are located at: C:Sandbox\%SANDBOX%
- added template support for Osiris and Slimjet browsers
Changed:
- improved SbieDll initialization a bit
- doubled size of Name_Buffer_Depth
- improved text filter in the templates view
Fixed:
- issue with forced process display
- crash issue with GetClassName
- minor UI issue
- UI language preset issue
- grouping issues in SandMan UI
- issue with EnableWin32kHooks
更新時間：2021-12-23
更新細節：
What's new in this version:
Support for Apple Silicon:
- Now Lunacy can run on Macs with Apple Silicon processors. You can download the build on our website. Later it will also be available on the App Store.
Scale tool:
- We revamped the Scale feature and moved it from the context toolbar to the main toolbar. You no longer need to define the required scale percentage. Simply select an object, click Scale too icon on the toolbar (or press K) and drag the bounding box.
- With the Scale tool selected, you can edit any of the settings (say, width) in the Inspector. Then press Enter, and Lunacy will scale all the other settings accordingly.
View Only and Export Only access to cloud documents:
When sharing a cloud document, you can select the access level to the document:
- Edit — full access to the document (except for deletion)
- Export — users with this access level cannot edit documents. They can only view and export selected objects or the whole project, and inspect the code of the objects. For instance, you can grant export access to developers.
- View — users with this access level can only view the content of the document
Code and Inspect panels:
We redesigned the Code panel for better usability. Also, now it features the Inspect panel (Alt+0 or ⌥+0) where you can view and copy values for selected objects:
- Dimensions
- Content of text layers
- Colors in different color models
- Styling options (borders, shadows, etc.)
Improvements:
- IME now works fine on Windows. The support for IME on Linux and macOS will be added in upcoming versions.
- Prototype sharing is back
- Better SVG export
- Improved rendering performance: gigantic files are welcome
- GPU rendering for M1 Macs
- Linux ARM build is now available
- Re-designed log in screen
更新時間：2021-12-16
更新細節：
What's new in this version:
- Fixed invalid handling of X509_verify_cert() internal errors in libssl Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a negative return value to indicate an internal error (for example out of memory). Such a negative return value is mishandled by OpenSSL and will cause an IO function (such as SSL_connect() or SSL_do_handshake()) to not indicate success and a subsequent call to SSL_get_error() to return the value SSL_ERROR_WANT_RETRY_VERIFY. This return value is only supposed to be returned by OpenSSL if the application has previously called SSL_CTX_set_cert_verify_callback(). Since most applications do not do this the SSL_ERROR_WANT_RETRY_VERIFY return value from SSL_get_error() will be totally unexpected and applications may not behave correctly as a result. The exact behaviour will depend on the application but it could result in crashes, infinite loops or other similar incorrect responses.
- This issue is made more serious in combination with a separate bug in OpenSSL 3.0 that will cause X509_verify_cert() to indicate an internal error when processing a certificate chain. This will occur where a certificate does not include the Subject Alternative Name extension but where a Certificate Authority has enforced name constraints. This issue can occur even with valid chains. ([CVE-2021-4044])
- Corrected a few file name and file reference bugs in the build, installation and setup scripts, which lead to installation verification failures. Slightly enhanced the installation verification script.
- Fixed EVP_PKEY_eq() to make it possible to use it with strictly private keys
- Fixed PVK encoder to properly query for the passphrase
- Multiple fixes in the OSSL_HTTP API functions
- Allow sign extension in OSSL_PARAM_allocate_from_text() for the OSSL_PARAM_INTEGER data type and return error on negative numbers used with the OSSL_PARAM_UNSIGNED_INTEGER data type. Make OSSL_PARAM_BLD_push_BN{,_pad}() return an error on negative numbers
- Allow copying uninitialized digest contexts with EVP_MD_CTX_copy_ex
- Fixed detection of ARMv7 and ARM64 CPU features on FreeBSD
- Multiple threading fixes
- Added NULL digest implementation to keep compatibility with 1.1.1 version
- Allow fetching an operation from the provider that owns an unexportable key as a fallback if that is still allowed by the property query
更新時間：2021-12-07
更新細節：
What's new in this version:
Added:
- added checkboxes to most major box options lists
- added SumatraPDF templates
Changed:
- rolled back change to "OpenClsid=..." handling
- made all major lists in the box options editable
Fixed:
- fixed issue with read only paths introduced in 1.0.0
- fixed BSOD issue introduced in the 1.0.0 build
- fixed multiple BITS notifications while running sandboxed Chromium browsersc
- fixed executables selection for "Run Menu" entries
- fixed SetCursorPos and ClipCursor ignoring DPI awareness
Removed:
- removed Virtual Desktop Manager template
更新時間：2021-11-26
更新細節：
What's new in this version:
- Fix errors when locally modifying an already trashed file
- Improve handling of rate limit errors