Updates 9/27/22/ - PaleMoon

PaleMoon v31.3.0 (2022-09-27)

https://www.palemoon.org/releasenotes.shtml

This is a major development, bugfix and security release.

Changes/fixes:

• Implemented .at(index) JavaScript method on built-in indexables (Array, String, TypedArray).
• Implemented the use of EventSource in workers.
• Enabled the sending of the Origin: header by default on same-origin requests.
• Changed how Pale Moon is built. We are now using Visual Studio 2022 on Windows, and have made build system changes to reduce build times and pressure on the linker on all platforms.
• Changed how Pale Moon handles standalone wave audio files (.wav). See implementation notes.
• Improved string normalization.
• Updated the handling of CSS "supports" to now accept unparenthesized strings (spec update).
• Updated the handling of flex containers in web pages for web compatibility.
• Fixed various issues when building for Mac OS X.
• Fixed various C++ standard conformance issues in the source code.
• Fixed several issues building on SunOS and Linux with various configurations and gcc versions.
• Fixed an issue with regular expressions' dotAll syntax and usage. See implementation notes.
• Switched custom hash map to std::unordered_map where prudent.
• Cleaned up and updated IPC thread locking code.
• Removed spacing for accessibility focus rings in form controls to align styling of them with expected metrics.
• Removed the unnecessary control module for building with non-standard configurations of the platform.
• Removed the -moz prefix from min-content and max-content CSS keywords where it was still in use.
• Security fixes: CVE-2022-40956 and CVE-2022-40958.
• UXP Mozilla security patch summary: 2 fixed, 11 not applicable.

Implementation notes:

• Pale Moon would previously send standalone wave audio files (.wav) to the system-configured media player if they would be opened standalone (i.e. not inside a HTML element in a page). This was done due to the historical use of rather exotic codecs in .wav files that would not be broadly supported in the browser. In the current day, however, this is much less of a concern. If you prefer to retain the old behavior and send .wav files to whatever the configured system media player is, then you should set the preference media.wave.play-stand-alone to false in about:config.
• There was a spec compliance issue with the dotAll regular expression implementation, causing it to not work properly. Specifically, using the new RegExp() constructor would not accept "s" as a flag, and the .dotAll property was not cased properly (all lowercase) causing compatibility issues.

 ==============================================

Available via the internal updater:   Help / Check for updates; 

or full downloads from https://www.palemoon.org/download.shtml