For users who have (most likely accidentally) granted a system-wide waiver for opening these kinds of files without being prompted, this permission has been reset. Improved the security check for launching executable files (by association) on Windows from the browser.Fixed a potential vulnerability with plugins being redirected to different origins (CVE-2018-12364).Prevented various location-based threats.The new version of Pale Moon includes several security fixes and Defense-in-Depth changes:
Pale Moon restricts web access to the moz-icon:// scheme because it "could potentially be abused to infringe the user's privacy". Last but not least, the new version does include a fix for the preference file not being writable.
0 kommentar(er)
