Changes:
- Implemented a breaking CSP (content security policy) spec change; when a page with CSP is loaded over http, Pale Moon now interprets CSP directives to also include https versions of the hosts listed in CSP if a scheme (http/https) isn't explicitly listed.
- Fixed an issue with the XML parser where it would sometimes end up in an unknown state.
- Fixed a few potentially exploitable crashes.
- Fixed a potentially exploitable crash related to text writing direction. (CVE-2016-5280).
- Made checking for invalid PNG files more strict.
Mirror 1 (US): here.
Mirror 2 (EU): here.
Alternatively, you can grab it from our FTP server:
Download: ftp://publicandroid:get@ftp.palemoon.org/releases/palemoon-25.9.6.android-arm.apk
Code: Select all
palemoon-25.9.6.android-arm.apk
Size: 24,164,610 Bytes
SHA-1: e9fa6e74562b5ea1ca11f252bdc00312387242fa
SHA-256: 02d0be43501c444dd2a4f890c48c97befabb360219352a8c504c5c2d37df7c2f
Whirlpool: b9eafa8a492920871f3607afd17bccdfa6dff3cd616ec47c8f158560d94d3b6f580ef7bd6a22eb0045e989d6c081d1f87581e03f101126b54ff85f5f7c12e709