Path to this page:
Subject: CVS commit: pkgsrc/www/palemoon
From: Nia Alarie
Date: 2024-10-09 16:07:42
Message id: 20241009140742.5DEC5FC7E@cvs.NetBSD.org
Log Message:
palemoon: Update to 33.4.0
v33.4.0 (2024-10-08)
This is a development, bugfix and security release.
Changes/fixes:
* Introduced the "ghostbuster" concept; this is an automated internal
mechanism to attempt cleanup of particularly problematic web content
after a tab or window is closed. See implementation notes.
* Added support for the PROT_MPROTECT security feature on targets that
use it (notably PaX and NetBSD).
* Implemented preferences to give the user control over the Same-Origin
Policy (SOP) and CORS preflight. See implementation notes.
* Improved buildability on NetBSD and Altivec architectures.
* Fixed building issues on Apple Silicon Mac with XCode 16.
* Added workarounds for non-standard MSE/WebM/VPx encoding on YouTube
that could cause video buffering and halting issues.
* Dev: Changed the default credentials mode for module scripts from
'omit' to 'same-origin', aligning with mainstream.
* Dev: Implemented getTransform and setTransform with DOMMatrix
arguments.
* Dev: Implemented ES2023 Hashbang grammar proposal.
* Fixed an issue with JavaScript's StructuredClone.
* Security issues addressed: CVE-2024-9396.
* Rejected: CVE-2024-9398 (properly informing the user about attempts to
use unhandled protocols by web pages is considered more important than
potential determination whether a handler for such a protocol is
installed)
Files: