Pale Moon 26.0 has been released
Pale Moon 26.0 has been released. The new version of the web browser is the first in which the switch to Goanna, the new rendering engine that is closely related to Gecko but not the same, is completed.
Pale Moon 26.0 ships with the Goanna rendering engine. While most users may not notice any changes whatsoever after updating to version 26.0 of the web browser, some may notice issues. This is to be expected considering that switching rendering engines is quite the major undertaking in the browser world.
The Pale Moon team asks users of the browser to report any issues that they may experience, for instance on sites that worked just fine in previous versions of the browser but not in Pale Moon 26.0, to report these issues so that they can be investigated and hopefully corrected.
Another change, this one understandable but not as pleasant for some users of the browser, saw the reduction of supported languages to "a little over 30". The Pale Moon project started to do full translations in-house and due to a lack of translators for less-common languages, cannot offer translations for these languages right now.
Pale Moon 26.0 changes
Lets take a closer look at some of the other changes and fixes in version 26 of Pale Moon.
One interesting feature that the team added to the new version is called conservative image decoding. Basically, what it does is implement lazy image loading decoding images only when they are in view. This should improve memory use on pages with images below the fold, and the load performance of image-heavy web pages.
- Support for the WebP image format was added to Pale Moon. Other graphics-related improvements include properly scaled EXIF rotated JPEG images, support for different WebGL texture formats, improved scaling of vector images and more.
- A second control of autoplaying media has been added. This one takes care of scripted content, and is enabled by default (meaning scripted media is allowed to play automatically). You can disable this by loading about:config, searching for
media.autoplay.allowscriptedand setting the preference to false by double-clicking on its name.
- Improved the handling of "very large" numbers of tabs.
- Added CSS queries that theme designers can make use of to determine the operating system the browser is run on to make OS-specific changes to the theme.
- The browser user interface has been updated making it more in line with the operating system it is run on.
Several security updates went into Pale Moon 26.0 as well. The team added an active XSS filter which checks for cross-site scripting attacks and blocks these attacks automatically.
Pale Moon users can control the feature in the options under security.
Support for 128-bit Camellia-GCM ciphers has been added, and several root certificates have been distrusted.
Additional information about the feature is available on the Pale Moon forum.
You can check out all changes in Pale Moon 26.0 on the release notes page.
Pale Moon 26.0.2
On February 3, 2016, Pale Moon 26.0.2 was released. It is a security, bug fix and web compatibility update.
- Removed the sanity check for unsupported point-of-sale XP-based operating systems by user request.
- Please see the forum for information on which operating systems we can reasonably support.
- Changed the way "transparent" is handled in Goanna to improve transparent gradients using this keyword.
- Made sure that dom.disable_beforeunload is predefined in about:config.
- Fixed web compatibility issues with Youtube, Youtube Gaming, Yuku fora and Netflix.
- Reinstated the about:config warning by default.
- Updated NSS to 220.127.116.11-PM to fix a potential UAF and CVE-2015-7575.
- Crash fix: Prevented queueing multiple media sources that could lead to unsafe memory access.
- Prevented unsafe memory manipulations in zip archives. (CVE-2016-1945) DiD
- Prevented a potential buffer overflow in WebGL. (x64 only) (CVE-2016-1935) DiD
- Updated the way binaries are code-signed. Not only does v26.0 use a new SHA256-signed digital certificate, but starting this version will also be signed with both SHA1 and SHA256 digest algorithms to satisfy later Windows' code-signing requirements.
- Fixed 2 potential browser crashes.
Pale Moon 26.0.3
Pale Moon 26.0.3 was released on February 5, 2016. It made the following changes to the browser:
- Changed our cookie gate to allow cookie names with spaces in them, to improve web compatibility.
Critical note: if your site uses cookie names with spaces in them, please consider moving away from doing that so you are no longer in the "grey" area of cookie behavior.
- Changed the configuration of our XSS filter to address some known, harmless filter hits that have been reported.
Pale Moon 26.1
Pale Moon 26.1 was released on February 16, 2016. It is a compatibility, stability and bugfix release:
- Disabled our ES6 Promise implementation introduced in 26.0 since there were some severe issues with its implementation that caused a lot of inexplicable failures on websites
- Improved website compatibility with many sites and web applications by making our cookie gate less strict.
- Fixed web compatibility with Google Hangouts and Yahoo Calendar.
- Changed the memory allocator on Windows platforms to a much more modern full-library implementation of jemalloc, with miscellaneous additional fixes. This should fix issues like "huge animated gif choking" and inexplicable pauses when using many tabs, scrolling (extremely) long pages, or viewing media.
- Fixed a few rare crashing issues on Windows due to the build process.
- Reduced so-called "jank" on inner frame scrolling reflows.
- Extension compatibility: partial implementation of Firefox 26 download js modules as shims. this should make more Firefox extensions compatible with us out-of-the-box
- Added a "superstop" key combination (Shift+Esc) that will stop all (foreground and background) network activity, stop animated gifs etc.
- Updated NTLM authentication
- Updated the default theme to tweak/improve it some more.
Pale Moon 26.1.1
Pale Moon 26.1.1 was released on February 24, 2016. It is a stability and extension compatibility update.
- Improves compatibility a number of Firefox extensions.
- Improved memory handling to address "the memory inflation issue" that some Pale Moon users experienced on version 26.0.
- Improved YouTube compatibility giving users the choice to use the Flash or HTML5 player on the site.
Pale Moon 26.2
Pale Moon 26.2 was released on April 5, 2016. It is a major update and bugfix release.
- Gstreamer 1.0 support has been implemented and enabled by default on Linux
- Updated UA overrides and XSS configuration to deal with some problematic sites.
- Mousewheel supports horizontal scrolling now.
- about:sessionrestore uses the full screen to display information now.
- Several bug- and security fixes, including several crash fixes.
Pale Moon 26.2.1
Pale Moon 26.2.1 was released on April 8, 2016. It fixes an issue with keyboard navigating the user interface.
Pale Moon 26.2.2
Pale Moon 26.2.2 was released on May 10, 2016. It is a "mainly" a security update but fixes several crash issues as well.
Pale Moon 26.3
Pale Moon 26.03.0 was released on June 21, 2016. The new version includes six security updates and the following changes:
- Detection for dark themes on Windows 10, and better Windows 10 theme integration.
- HTML5 Media volume preference added and controlled by the preference media.default_volume. Default is 1.0 which means 100% volume.
- HTML5 Media controls updated. They feature a horizontal volume control on all media now.
- Minimum limit for places entries is 10,000.
- Various architecture improvements.
Pale Moon 26.3.1
Pale Moon 26.3.1. was released on June 25, 2016. It is a bug fix release mostly that fixes smaller issues including compatibility issues with Google Web Fonts.
Pale Moon 26.3.2 (Windows only)
Pale Moon 26.3.2 was released on June 27, 2016. It fixes two issues, one on Windows 8 the other on Windows 10. Additionally, the portable version was switched to a non-compressed binary format to avoid issues with antivirus and security software.
Pale Moon 26.3.3
Pale Moon 26.3.3 was released on July 1, 2016. It fixes an issue on Windows 10 that could cause text to be white on white, and another issue where news feed would not show up when embedded on web pages.
Also, removed a security policy directive that was causing issues on some sites.
Pale Moon 26.4.0
Pale Moon 26.4.0 was released on August 17, 2016. The new release removes Google Search as a bundled search provider. Pale Moon users may still add it to the browser if they want to use Google Search.
The release features some component updates, crash fixes, and security fixes on top of that.
Pale Moon 18.104.22.168
A Linux-only release that uses GStreamer for video support to prevent crashes when playing some HTML5 videos.
Pale Moon 26.4.1
The new version fixes two security issues and fixes some bugs. It fixes a crash in the XSS filter among other things.
Pale Moon 26.5.0
Pale Moon 26.5.0 was released on September 28, 2016. The release fixes several security issues in Pale Moon, hardens the browser's security in several ways, and several other fixes. Particularly, it adds a breaking Content Security Policy change.
when a page with CSP is loaded over http, Pale Moon now interprets CSP directives to also include https versions of the hosts listed in CSP if a scheme (http/https) isn't explicitly listed. This breaks with CSP 1.0 which is more restrictive and doesn't allow this cross-protocol access, but is in line with CSP 2 where this is allowed.