Pale Moon forum

This is a development, bugfix and security update.

• Added a preference (browser.tabs.allowTabDetach) to control whether "tearing off" of tabs is allowed.
• Updated some needed user-agent overrides for web compatibility with a few large sites.
• Added support for the scrollbar-width CSS keyword.
• Fixed a javascript performance issue.
• Enabled several platform features by default for web compatibility.
• Removed the use of <menuitem> in page content.
• Fixed several memory safety hazards and potential browser crashes
• Security issues fixed: CVE-2021-23962, CVE-2021-23953 and ZDI-CAN-12197.
• Unified XUL Platform Mozilla Security Patch Summary: 4 fixed, 6 defense-in-depth, 22 not applicable.

This is merely an observation, not a complaint in any way, shape, or form: On the two machines that I updated today, the Basilisk update took about four times longer than Pale Moon to download. Ultimately, both updates worked fine.

Served from the same origin server, so not anything in our hands.

It always seemed to me that the European link delivered a faster download than the US one even though I'm in the US.

Thank you for this Browser and a big thank you very much to all developers! This Browser saved me from using Chrome or the "new" Firefox.

Ysveltel wrote: ↑

2021-02-07, 01:16

Thank you for this Browser and a big thank you very much to all developers! This Browser saved me from using Chrome or the "new" Firefox.

Seconded, I dislike anything chrome based even the current firefox, which may be dying in the future.

Unless they hand it off to someone else...

Hopefully someone who will not rustify everyone to death and back... if it even happens.

I would prefer palemoon to take firefox's place in popularity and more so...



And yeah, we should thank Moonchild for his hard work. Without him we would be stuck with a chromium based empire

Moonchild wrote: ↑

2021-02-06, 20:43

Served from the same origin server, so not anything in our hands.

Thanks for your message.

Yes, I tried it a day later on another machine, and the download times were identical.

What development team heh.. Basilisk is Moonchild's and only Moonchild's project. Though we all work on UXP. Only thing I did for Basilisk that was any significance was to repeal and replace the FE sync client with the one from Pale Moon. But that was a few years ago.

Wouldn't any development done on UXP count as well, since it is the "basis" for it?

We maintain and reinforce the difference between application and platform because that is how it actually is. Don't believe ancient Mozilla propaganda from 2009.

Okay, then, a big thank you to every UXP developer

What exactly does "Removed the use of <menuitem> in page content." mean? I use an addon to manage menuitems - will that be affected by this change?

sts_66 wrote: ↑

2021-03-27, 17:01

Removed

Something has been removed

sts_66 wrote: ↑

2021-03-27, 17:01

the use of

What is removed is the availability of something

sts_66 wrote: ↑

2021-03-27, 17:01

<menuitem>

The "something" is the <menuitem> tag

sts_66 wrote: ↑

2021-03-27, 17:01

in page content.

And it only applies to web page content.

---

sts_66 wrote: ↑

2021-03-27, 17:01

I use an addon to manage menuitems - will that be affected by this change?

See "in page content".

Crap - the update ruined Yahoo Mail, it says I have an unsupported browser, will only load basic mail. Cleared cache, didn't help. How do I roll back the version?

It's unlikely the update changed compatibility with Yahoo mail and rolling back won't actually help in that case.
Try a few different useragent overrides in about:config.

I changed user agent to about as modern as it get,

general.useragent.override Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36 Edg/87.0.664.75

and no joy, Yahoo mail still says unsupported browser - I also use the Random Agent Spoofer add-on, it used to work until the latest update of Basilisk, and it still works on an old version of Comodo Icedragon I also use, get the new Yahoo email GUI no problem. Any other way Basilisk is passing on user agent to Yahoo?

Spoofing random user agents is generally a bad idea -- and if it "doesn't work" then maybe it's actually interfering here.

Manually entering the user agent string in "general.useragent.override" overwrites whatever the agent spoofer had put in there - is that the correct string to modify? I ask because when I disabled the agent spoofer add-on that string disappeared from about:config. Searching for a similar string reveals this - I have no idea where all the user agents for specific websites came from, but because they're not in bold it means those are default settings, not ones I changed by hand or via the agent spoofer:

sts_66 wrote: ↑

2021-03-31, 15:40

"general.useragent.override"

The pref for global user agent overrides was changed in PM 28.17.0.
Please see release notes for that version, and posts here and here.

Thanks! That did the trick, didn't even have to restart the browser, just reloaded Yahoo Mail. Don't use compatibility mode for anything so the change shouldn't mess up other sites. Me happy now!