summaryrefslogtreecommitdiff
path: root/www/firefox/PLIST
AgeCommit message (Collapse)AuthorFilesLines
2015-05-12Update to 38.0ryoon1-35/+110
Changelog: New New tab-based preferences New Ruby annotation support New Base for the next ESR release. Changed autocomplete=off is no longer supported for username/password fields Changed URL parser avoids doing percent encoding when setting the Fragment part of the URL, and percent decoding when getting the Fragment in line with the URL spec Changed RegExp.prototype.source now returns "(?:)" instead of the empty string for empty regular expressions Changed Improved page load times via speculative connection warmup HTML5 WebSocket now available in Web Workers HTML5 BroadcastChannel API implemented HTML5 Implemented srcset attribute and <picture> element for responsive images HTML5 Implemented DOM3 Events KeyboardEvent.code HTML5 Mac OS X: Implemented a subset of the Media Source Extensions (MSE) API to allow native HTML5 playback on YouTube HTML5 Implemented Encrypted Media Extensions (EME) API to support encrypted HTML5 video/audio playback (Windows Vista or later only) HTML5 Automatically download Adobe Primetime Content Decryption Module (CDM) for DRM playback through EME (Windows Vista or later only) Developer Optimized-out variables are now visible in Debugger UI Developer XMLHttpRequest logs in the web console are now visually labelled and can be filtered separately from regular network requests Developer WebRTC now has multistream and renegotiation support Developer copy command added to console Fixed Various security fixes Fixed in Firefox 38 2015-58 Mozilla Windows updater can be run outside of application directory 2015-57 Privilege escalation through IPC channel messages 2015-56 Untrusted site hosting trusted page can intercept webchannel responses 2015-55 Buffer overflow and out-of-bounds read while parsing MP4 video metadata 2015-54 Buffer overflow when parsing compressed XML 2015-53 Use-after-free due to Media Decoder Thread creation during shutdown 2015-52 Sensitive URL encoded information written to Android logcat 2015-51 Use-after-free during text processing with vertical text enabled 2015-50 Out-of-bounds read and write in asm.js validation 2015-49 Referrer policy ignored when links opened by middle-click and context menu 2015-48 Buffer overflow with SVG content and CSS 2015-47 Buffer overflow parsing H.264 video with Linux Gstreamer 2015-46 Miscellaneous memory safety hazards (rv:38.0 / rv:31.7)
2015-04-16Fix PLIST.hiramatsu1-2/+1
Because this package does not use gnomevfs, libnkgnomevfs.so is not installed.
2015-04-05Update to 37.0ryoon1-15/+56
* Bump nspr requirement. Changelog: New Heartbeat user rating system - your feedback about Firefox New Yandex set as default search provider for the Turkish locale New Bing search now uses HTTPS for secure searching New Improved protection against site impersonation via OneCRL centralized certificate revocation New Opportunistically encrypt HTTP traffic where the server supports HTTP/2 AltSvc Changed Disabled insecure TLS version fallback for site security Changed Extended SSL error reporting for reporting non-certificate errors Changed TLS False Start optimization now requires a cipher suite using AEAD construction Changed Improved certificate and TLS communication security by removing support for DSA Changed Improved performance of WebGL rendering on Windows HTML5 Implemented a subset of the Media Source Extensions (MSE) API to allow native HTML5 playback on YouTube (Windows only) HTML5 Added support for CSS display:contents HTML5 IndexedDB now accessible from worker threads HTML5 New SDP/JSEP implementation in WebRTC Developer Debug tabs opened in Chrome Desktop, Chrome for Android, and Safari for iOS Developer New Inspector animations panel to control element animations Developer New Security Panel included in Network Panel Developer Debugger panel support for chrome:// and about:// URIs Developer Added logging of weak ciphers to the web console Fixed Various security fixes Fixed in Firefox 37 2015-42 Windows can retain access to privileged content on navigation to unprivileged pages 2015-41 PRNG weakness allows for DNS poisoning on Android 2015-40 Same-origin bypass through anchor navigation 2015-39 Use-after-free due to type confusion flaws 2015-38 Memory corruption crashes in Off Main Thread Compositing 2015-37 CORS requests should not follow 30x redirections after preflight 2015-36 Incorrect memory management for simple-type arrays in WebRTC 2015-35 Cursor clickjacking with flash and images 2015-34 Out of bounds read in QCMS library 2015-33 resource:// documents can load privileged pages 2015-32 Add-on lightweight theme installation approval bypassed through MITM attack 2015-31 Use-after-free when using the Fluendo MP3 GStreamer plugin 2015-30 Miscellaneous memory safety hazards (rv:37.0 / rv:31.6)
2015-02-28Update to 36.0ryoon1-15/+44
Changelog: New Pinned tiles on the new tab page can be synced New Support for the full HTTP/2 protocol. HTTP/2 enables a faster, more scalable, and more responsive web. New Locale added: Uzbek (uz) Changed -remote option removed Changed No longer accept insecure RC4 ciphers whenever possible Changed Phasing out Certificates with 1024-bit RSA Keys Changed Shut down hangs will now show the crash reporter before exiting the program Changed Add-on Compatibility HTML5 Support for the ECMAScript 6 Symbol data type added HTML5 unicode-range CSS descriptor implemented HTML5 CSSOM-View scroll behavior implemented allowing smooth scrolling of content without custom libraries HTML5 object-fit and object-position implemented. Defines how and where the content of a replaced element is displayed HTML5 isolation CSS property implemented. Create a new stacking context to isolate groups of boxes to control which blend together HTML5 CSS3 will-change property implemented. Hints the browser of elements that will be modified. The browser will perform some performance optimization for these HTML5 Changed JavaScript 'const' semantics to conform better to the ES6 specification. The const declaration is now block-scoped and requires an initializer. It also can not be redeclared anymore. HTML5 Improved ES6 generators for better performance Developer Eval sources now appear in the Debugger Debug JavaScript code that is evaluated dynamically, either as a string passed to eval() or as a string passed to the Function constructor Developer DOM Promises inspection Developer Inspector: More paste options in markup view Fixed CSS gradients work on premultiplied colors Fixed Fix some unexpected logout from Facebook or Google after restart Fixed Various security fixes Fixed in Firefox 36 2015-27 Caja Compiler JavaScript sandbox bypass 2015-26 UI Tour whitelisted sites in background tab can spoof foreground tabs 2015-25 Local files or privileged URLs in pages can be opened into new tabs 2015-24 Reading of local files through manipulation of form autocomplete 2015-23 Use-after-free in Developer Console date with OpenType Sanitiser 2015-22 Crash using DrawTarget in Cairo graphics library 2015-21 Buffer underflow during MP3 playback 2015-20 Buffer overflow during CSS restyling 2015-19 Out-of-bounds read and write while rendering SVG content 2015-18 Double-free when using non-default memory allocators with a zero-length XHR 2015-17 Buffer overflow in libstagefright during MP4 video playback 2015-16 Use-after-free in IndexedDB 2015-15 TLS TURN and STUN connections silently fail to simple TCP connections 2015-14 Malicious WebGL content crash when writing strings 2015-13 Appended period to hostnames can bypass HPKP and HSTS protections 2015-12 Invoking Mozilla updater will load locally stored DLL files 2015-11 Miscellaneous memory safety hazards (rv:36.0 / rv:31.5)
2015-01-30Fix many issues on Darwinpho1-1/+2
PLIST: * lib/firefox/libmozglue.so is built and installed as a shared library on some platforms including Darwin. mozilla-common.mk: * Sandboxing support is only available when the toolkit is cairo-cocoa. * It tries to use MacOS X 10.6 SDK by default, which is not always possible. patches/patch-build_gyp.mozbuild: * Don't assume iOS just because the toolkit is not cocoa. Ideally there should be an AC_SUBST just like 'ARM_ARCH' but nothing exists currently. * MacOS X SDK version should be able to configure with ./configure --enable-macos-target=VER patches/patch-extensions_spellcheck_hunspell_src_mozHunspell.cpp: * NS_NewNativeLocalFile() can fail and leave hunDir null, so we must check if it succeeded. This is not Darwin specific though. * "%%LOCALBASE%%" in the hunspell path is currently not substituted, which looks very erroneous to me. But since I don't know why ryoon@ changed it from "@PREFIX@" to "%%LOCALBASE%%" I leave it as it is. patches/patch-ipc_glue_moz.build: * Don't assume cocoa toolkit just because OS_ARCH is Darwin. patches/patch-js_src_asmjs_AsmJSSignalHandlers.cpp: * Increase portability for non-x86 Darwin by not hardwiring x86_THREAD_STATE. patches/patch-js_xpconnect_src_xpcprivate.h: * The declaration has to be C++11 'extern template', otherwise non-weak symbol collision will occur between libmozjs and libxul. We can't easily test if the feature is supported by compiler due to GCC bug #1773: http://gcc.gnu.org/bugzilla/show_bug.cgi?id=1773 patches/patch-memory_mozalloc_VolatileBufferOSX.cpp: * Try to fallback to valloc(3) if posix_memalign(3) is not avialble. It has been added since MacOS 10.6. patches/patch-toolkit_library_moz.build: * GSTREAMER_LIBS are linked to libxul on Darwin, while they are dlopen(3)'ed at runtime on other platforms. The problem is that the toolkit being cocoa isn't relevant at all. It's Darwin that needs the special handling, not Cocoa. patches/patch-toolkit_xre_nsAppRunner.cpp: * MacOS X < 10.6 had an undocumented behavior concerning execve(2) inside a threaded process. If a process tried to call execve(2) and had more than one active thread, the kernel returned ENOTSUP. So we have to either fork(2) or vfork(2) before calling execve(2) to make sure the caller is single-threaded as otherwise the application fails to restart itself. patches/patch-xpcom_base_nsStackWalk.cpp, patches/patch-xpcom_build_PoisonIOInterposer.h: * Replace XP_MACOSX with XP_DARWIN as the former is not defined when the toolkit is not cocoa. patches/patch-xpcom_glue_standalone_nsXPCOMGlue.cpp: * Fix inconsistent use of XP_DARWIN and XP_MACOSX: LEADING_UNDERSCORE should be empty when we are going to load XPCOM using dlopen(3), not NSAddImage().
2015-01-16Update to 35.0ryoon1-39/+85
Changelog: New Firefox Hello with new rooms-based conversations model New New search UI improved and enabled for more locales New Access the Firefox Marketplace from the Tools menu and optional toolbar button New Built-in support for H264 (MP4) on Mac OS X Snow Leopard (10.6) and newer through native APIs New Use tiled rendering on OS X New Improved high quality image resizing performance New Improved handling of dynamic styling changes to increase responsiveness HTML5 Added support for the CSS Font Loading API HTML5 Resource Timing API implemented HTML5 CSS filters enabled by default HTML5 Changed JavaScript 'let' semantics to conform better to the ES6 specification Developer Support for inspecting ::before and ::after pseudo elements Developer Computed view: Nodes matching the hovered selector are now highlighted Developer Network Monitor: New request/response headers view (more info) Developer Added support for the EXT_blend_minmax WebGL extension Fixed Show DOM Properties context menu item in inspector Fixed Reduced resource usage for scaled images Fixed PDF.js updated to version 1.0.907 Fixed Non-HTTP(S) XHR now returns correct status code Fixed Various security fixes Security fixes: 2015-09 XrayWrapper bypass through DOM objects 2015-08 Delegated OCSP responder certificates failure with id-pkix-ocsp-nocheck extension 2015-07 Gecko Media Plugin sandbox escape 2015-06 Read-after-free in WebRTC 2015-05 Read of uninitialized memory in Web Audio 2015-04 Cookie injection through Proxy Authenticate responses 2015-03 sendBeacon requests lack an Origin header 2015-02 Uninitialized memory use during bitmap rendering 2015-01 Miscellaneous memory safety hazards (rv:35.0 / rv:31.4)
2014-12-01Update to 34.0.5ryoon1-55/+177
Changelog: New Default search engine changed to Yahoo! for North America New Default search engine changed to Yandex for Belarusian, Kazakh, and Russian locales New Improved search bar (en-US only) New Firefox Hello real-time communication client New Easily switch themes/personas directly in the Customizing mode New Wikipedia search now uses HTTPS for secure searching (en-US only) New Implementation of HTTP/2 (draft14) and ALPN New Recover from a locked Firefox process in the "Firefox is already running" dialog on Windows Changed Disabled SSLv3 Changed Proprietary window.crypto properties/functions re-enabled (to be removed in Firefox 35) Changed Firefox signed by Apple OS X version 2 signature HTML5 ECMAScript 6 WeakSet Implemented HTML5 JavaScript Template Strings Implemented HTML5 CSS3 Font variants and features control (e.g. kerning) implemented HTML5 WebCrypto: RSA-OAEP, PBKDF2 and AES-KW support HTML5 WebCrypto: wrapKey and unwrapKey implemented HTML5 WebCrypto: Import/export of JWK-formatted keys HTML5 matches() DOM API implemented (formerly mozMatchesSelector()) HTML5 Performance.now() for workers implemented HTML5 WebCrypto: ECDH support Developer WebIDE: Create, edit, and test a new Web application from your browser Developer Highlight all nodes that match a given selector in the Style Editor and the Inspector's Rules panel Developer Improved User Interface of the Profiler Developer console.table function added to web console Fixed CSS transitions start correctly when started at the same time as changes to display, position, overflow, and similar properties Fixed Various security fixes 2014-89 Bad casting from the BasicThebesLayer to BasicContainerLayer 2014-88 Buffer overflow while parsing media content 2014-87 Use-after-free during HTML5 parsing 2014-86 CSP leaks redirect data via violation reports 2014-85 XMLHttpRequest crashes with some input streams 2014-84 XBL bindings accessible via improper CSS declarations 2014-83 Miscellaneous memory safety hazards (rv:34.0 / rv:31.3)
2014-11-15firefox-33.1 has DuckDuckGo as a search option,szptvlfn1-2/+1
so remove related patches.
2014-11-10Update to 33.1ryoon1-1/+5
Changelog: New Forget Button added New Enhanced Tiles New Privacy tour introduced New Adding DuckDuckGo as a search option
2014-11-06Bump PKGREVISIONryoon1-1/+2
* Build libmozjs.so shared library again. Thank you, joerg@.
2014-10-29Bump PKGREVISIONryoon1-2/+1
* Disable libmozjs.so to avoid WRKDIR reference error.
2014-10-15Update to 33.0ryoon1-13/+155
Changelog: New OpenH264 support (sandboxed) New Improved search experience through the location bar New Slimmer and faster JavaScript strings New Search suggestions on the Firefox Start (about:home) and new tab (about:newtab) pages New Windows: OMTC enabled by default New New CSP (Content Security Policy) backend New Support for connecting to HTTP proxy over HTTPS New Improved reliability of the session restoration New Azerbaijani [az] locale added Changed Proprietary window.crypto properties/functions removed Changed JSD (JavaScript Debugger Service) removed in favor of the Debugger interface HTML5 @counter-style rule from CSS3 Counter Styles specification implemented HTML5 DOMMatrix interface implemented Developer Cubic-bezier curves editor Developer Display which elements have listeners attached Developer New sidebar which displays a list of shortcuts to every @media rule in the current stylesheet Developer Paint flashing for browser content repaints Developer Editable @keyframes rules in the Rules section of the Inspector Developer CSS transform highlighter in the style-inspector Fixed Fix incomplete downloads being marked as complete by detecting broken HTTP1.1 transfers (237623) Fixed Various security fixes Fixed in Firefox 33 MFSA 2014-82 Accessing cross-origin objects via the Alarms API MFSA 2014-81 Inconsistent video sharing within iframe MFSA 2014-80 Key pinning bypasses MFSA 2014-79 Use-after-free interacting with text directionality MFSA 2014-78 Further uninitialized memory use during GIF MFSA 2014-77 Out-of-bounds write with WebM video MFSA 2014-76 Web Audio memory corruption issues with custom waveforms MFSA 2014-75 Buffer overflow during CSS manipulation MFSA 2014-74 Miscellaneous memory safety hazards (rv:33.0 / rv:31.2)
2014-10-05Update to 32.0.3ryoon1-40/+142
Changelog: Fixed 32.0.3: New security fixes can be found here New New HTTP cache provides improved performance including crash recovery New Integration of generational garbage collection New Public key pinning support enabled New View historical use information for logins stored in password manager New Display the number of found items in the find toolbar New Easier back, forward, reload, and bookmarking through the context menu New Lower Sorbian [dsb] locale added Changed Removed and turned off trust bit for some 1024-bit root certificates Changed Performance improvements to Password Manager and Add-on Manager HTML5 drawFocusIfNeeded enabled by default HTML5 ECMAScript 6 built-in method Array#copyWithin implemented HTML5 CSS position:sticky enabled by default HTML5 mix-blend-mode enabled by default HTML5 New Array built-in: Array.from() HTML5 navigator.languages property and languagechange event implemented HTML5 Vibration API updated to latest W3C spec HTML5 CSS box-decoration-break replaces -moz-background-inline-policy HTML5 box-decoration-break enabled by default Developer HiDPI support in Developer Tools UI Developer Inspector button moved to the top left Developer Hidden nodes displayed differently in the markup-view Developer New Web Audio Editor Developer Code completion and inline documentation added to Scratchpad Fixed 32.0.2 - Corrupt installations cause Firefox to crash on update Fixed 32.0.1 - Stability issues for computers with multiple graphics cards Fixed 32.0.1 - Mixed content icon may be incorrectly displayed instead of lock icon for SSL sites Fixed 32.0.1 - WebRTC: setRemoteDescription() silently fails if no success callback is specified Fixed Various security fixes Fixed Mac OS X: cmd-L does not open a new window when no window is available Fixed Text Rendering Issues on Windows 7 with Platform Update KB2670838 (MSIE 10 Prerequisite) or on Windows 8.1 Security fixes: Fixed in Firefox 32.0.3 MFSA 2014-73 RSA Signature Forgery in NSS Fixed in Firefox 32 MFSA 2014-72 Use-after-free setting text directionality MFSA 2014-71 Profile directory file access through file: protocol MFSA 2014-70 Out-of-bounds read in Web Audio audio timeline MFSA 2014-69 Uninitialized memory use during GIF rendering MFSA 2014-68 Use-after-free during DOM interactions with SVG MFSA 2014-67 Miscellaneous memory safety hazards (rv:32.0 / rv:31.1 / rv:24.8)
2014-07-24Update to 31.0ryoon1-23/+273
Changelog: New Add the search field to the new tab page New Support of Prefer:Safe http header for parental control (learn more) New mozilla::pkix as default certificate verifier (learn more) New Block malware from downloaded files (learn more) New Partial implementation of the OpenType MATH table (section 6.3.6) see documentation about mathematical fonts and the MathML Torture Test for details New audio/video .ogg and .pdf files handled by Firefox if no application specified (Windows only) New Upper Sorbian [hsb] locale added Changed Removal of the CAPS infrastructure for specifying site-specific permissions (via capability.policy.* preferences). Most notably, attempts to use this functionality to grant access to the clipboard will no longer work. The sole exception is the checkloaduri permission, which may still be used as before to allow sites to load file:// URIs. HTML5 WebVTT implemented and enabled (learn more) HTML5 CSS3 variables implemented (learn more) Developer Developer Tools: Add-on Debugger (learn more) Developer Developer Tools: Canvas Debugger (learn more) Developer New Array built-in: Array.prototype.fill() (learn more) Developer New Object built-in: Object.setPrototypeOf() (learn more) Developer CSP 1.1 nonce-source and hash-source enabled by default Developer Developer Tools: Eyedropper tool added to the color picker (learn more) Developer Developer Tools: Editable Box Model (learn more) Developer Developer Tools: Code Editor improvements (learn more) Developer Developer Tools: Console stack traces (learn more) Developer Developer Tools: Copy as cURL (learn more) Developer Developer Tools: Styled console logs (learn more) Developer navigator.sendBeacon enabled by default (learn more) Developer Dialogs spawned from the onbeforeunload event no longer block access to the rest of the browser Fixed Search for partially selected link text from context menu (985824) Fixed Various security fixes Fixed in Firefox 31 MFSA 2014-66 IFRAME sandbox same-origin access through redirect MFSA 2014-65 Certificate parsing broken by non-standard character encoding MFSA 2014-64 Crash in Skia library when scaling high quality images MFSA 2014-63 Use-after-free while when manipulating certificates in the trusted cache MFSA 2014-62 Exploitable WebGL crash with Cesium JavaScript library MFSA 2014-61 Use-after-free with FireOnStateChange event MFSA 2014-60 Toolbar dialog customization event spoofing MFSA 2014-59 Use-after-free in DirectWrite font handling MFSA 2014-58 Use-after-free in Web Audio due to incorrect control message ordering MFSA 2014-57 Buffer overflow during Web Audio buffering for playback MFSA 2014-56 Miscellaneous memory safety hazards (rv:31.0 / rv:24.7)
2014-06-11Update to 30.0ryoon1-39/+165
* debug build is broken Changelog: New Sidebars button in browser chrome enables faster access to social, bookmark, & history sidebars New Mac OS X command-E sets find term to selected text New Support for GStreamer 1.0 Changed Disallow calling WebIDL constructors as functions on the web Developer With the exception of those bundled inside an extension or ones that are whitelisted, plugins will no longer be activated by default (see blog post) Developer Fixes to box-shadow and other visual overflow (see bug 480888) Developer Mute and volume available per window when using WebAudio Developer background-blend-mode enabled by default Developer Use of line-height allowed for <input type="reset|button|submit"> Developer ES6 array and generator comprehensions implemented (read docs for more details) Developer Error stack now contains column number Developer Support for alpha option in canvas context options (feature description) Fixed Ignore autocomplete="off" when offering to save passwords via the password manager (see 956906) Fixed TypedArrays don't support new named properties (see 695438) Fixed Various security fixes Fixed in Firefox 30 MFSA 2014-54 Buffer overflow in Gamepad API MFSA 2014-53 Buffer overflow in Web Audio Speex resampler MFSA 2014-52 Use-after-free with SMIL Animation Controller MFSA 2014-51 Use-after-free in Event Listener Manager MFSA 2014-50 Clickjacking through cursor invisability after Flash interaction MFSA 2014-49 Use-after-free and out of bounds issues found using Address Sanitizer MFSA 2014-48 Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
2014-05-28PR pkg/48840: Fix PLIST on Cygwin and Darwinpho1-1/+2
libmozglue is built and installed as a shared library on these platforms.
2014-05-05Fix packaging under OpenBSDryoon1-8/+8
* It create .so.1.0 libraries instead of .so * Use bsdtar as tar forcibly under OpenBSD * Fix tremor/vorbis conditional, but it is not used now
2014-04-30Update to 29.0ryoon1-68/+208
* Restore html5 audio playback under NetBSD Changelog: New Significant new customization mode makes it easy to personalize your Web experience to access the features you use the most (learn more) New A new, easy to access menu sits in the right hand corner of Firefox and includes popular browser controls New Sleek new tabs provide an overall smoother look and fade into the background when not active New An interactive onboarding tour to guide users through the new Firefox changes New The ability to set up Firefox Sync by creating a Firefox account (learn more) New Gamepad API finalized and enabled (learn more) New HTTPS used for Yahoo Searches performed in en-US locale New Malay [ma] locale added Changed Clicking on a W3C Web Notification will switch to the originating tab Developer 'box-sizing' (dropping the -moz- prefix) implemented (learn more) Developer Console object available in Web Workers (learn more) Developer Promises enabled by default (learn more) Developer SharedWorker enabled by default Developer <input type="number"> implemented and enabled Developer <input type="color"> implemented and enabled Developer Enabled ECMAScript Internationalization API Developer Add-on bar has been removed, content moved to navigation bar Developer Implemented URLSearchParams from the URL specification (see MDN for details ) Fixed Various security fixes Fixed in Firefox 29 MFSA 2014-47 Debugger can bypass XrayWrappers with JavaScript MFSA 2014-46 Use-after-free in nsHostResolve MFSA 2014-45 Incorrect IDNA domain name matching for wildcard certificates MFSA 2014-44 Use-after-free in imgLoader while resizing images MFSA 2014-43 Cross-site scripting (XSS) using history navigations MFSA 2014-42 Privilege escalation through Web Notification API MFSA 2014-41 Out-of-bounds write in Cairo MFSA 2014-40 Firefox for Android addressbar suppression MFSA 2014-39 Use-after-free in the Text Track Manager for HTML video MFSA 2014-38 Buffer overflow when using non-XBL object as XBL MFSA 2014-37 Out of bounds read while decoding JPG images MFSA 2014-36 Web Audio memory corruption issues MFSA 2014-35 Privilege escalation through Mozilla Maintenance Service Installer MFSA 2014-34 Miscellaneous memory safety hazards (rv:29.0 / rv:24.5)
2014-03-20Update to 28.0ryoon1-26/+51
Changelog: NEW VP9 video decoding implemented NEW Mac OS X: Notification Center support for web notifications NEW Horizontal HTML5 audio/video volume control NEW Support for Opus in WebM CHANGED Now that spdy/3 is implemented support for spdy/2 has been removed and servers without spdy/3 will negotiate to http/1 without any penalty DEVELOPER Support for MathML 2.0 'mathvariant' attribute DEVELOPER Background thread hang reporting DEVELOPER Support for multi-line flexbox in layout FIXED Various security fixes Fixed in Firefox 28 MFSA 2014-32 Out-of-bounds write through TypedArrayObject after neutering MFSA 2014-31 Out-of-bounds read/write through neutering ArrayBuffer objects MFSA 2014-30 Use-after-free in TypeObject MFSA 2014-29 Privilege escalation using WebIDL-implemented APIs MFSA 2014-28 SVG filters information disclosure through feDisplacementMap MFSA 2014-27 Memory corruption in Cairo during PDF font rendering MFSA 2014-26 Information disclosure through polygon rendering in MathML MFSA 2014-25 Firefox OS DeviceStorageFile object vulnerable to relative path escape MFSA 2014-24 Android Crash Reporter open to manipulation MFSA 2014-23 Content Security Policy for data: documents not preserved by session restore MFSA 2014-22 WebGL content injection from one domain to rendering in another MFSA 2014-21 Local file access via Open Link in new tab MFSA 2014-20 onbeforeunload and Javascript navigation DOS MFSA 2014-19 Spoofing attack on WebRTC permission prompt MFSA 2014-18 crypto.generateCRMFRequest does not validate type of key MFSA 2014-17 Out of bounds read during WAV file decoding MFSA 2014-16 Files extracted during updates are not always read only MFSA 2014-15 Miscellaneous memory safety hazards (rv:28.0 / rv:24.4)
2014-02-08Update to 27.0ryoon1-14/+93
Changelog: NEW You can now run more than one service at a time with Firefox SocialAPI, allowing you to receive notifications, chat and more from multiple integrated services CHANGED Enabled TLS 1.1 (RFC 4346) and TLS 1.2 (RFC 5246) by default CHANGED Added support for SPDY 3.1 protocol DEVELOPER Ability to reset style sheets using 'all:unset' DEVELOPER You can now choose to deobfuscate javascript in the debugger (see 762761) DEVELOPER Added support for scrolled fieldsets (see 261037) DEVELOPER Implemented allow-popups directive for iframe sandbox, enabling increased security (see 766282) DEVELOPER CSS cursor keywords -moz-grab and -moz-grabbing have been unprefixed (see 880672) DEVELOPER Added support for ES6 generators in SpiderMonkey (see blog post) DEVELOPER Implemented support for mathematical function Math.hypot() in ES6 (see 896264) HTML5 Dashed line support on Canvas (see 768067) FIXED Get Azure/Skia content rendering working on Linux (see 740200) FIXED 27.0: Security fixes can be found here Fixed in Firefox 27 MFSA 2014-13 Inconsistent JavaScript handling of access to Window objects MFSA 2014-12 NSS ticket handling issues MFSA 2014-11 Crash when using web workers with asm.js MFSA 2014-10 Firefox default start page UI content invokable by script MFSA 2014-09 Cross-origin information leak through web workers MFSA 2014-08 Use-after-free with imgRequestProxy and image proccessing MFSA 2014-07 XSLT stylesheets treated as styles in Content Security Policy MFSA 2014-06 Profile path leaks to Android system log MFSA 2014-05 Information disclosure with *FromPoint on iframes MFSA 2014-04 Incorrect use of discarded images by RasterImage MFSA 2014-03 UI selection timeout missing on download prompts MFSA 2014-02 Clone protected content with XBL scopes MFSA 2014-01 Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
2013-12-15Update to 26.0ryoon1-18/+108
* Build outside WRKSRC, fix build Changelog: NEW All Java plug-ins are defaulted to 'click to play' NEW Password manager now supports script-generated password fields NEW Updates can now be performed by Windows users without write permissions to Firefox install directory (requires Mozilla Maintenance Service) NEW Support for H.264 on Linux if the appropriate gstreamer plug-ins are installed CHANGED Support for MP3 decoding on Windows XP, completing MP3 support across Windows OS versions CHANGED CSP implementation now supports multiple policies, including the case of both an enforced and Report-Only policy, per the spec DEVELOPER Social API now supports Social Bookmarking for multiple providers through its SocialMarks functionality (see MDN docs) DEVELOPER Math.ToFloat32 takes a JS value and converts it to a Float32, whenever possible DEVELOPER There is no longer a prompt when websites use appcache DEVELOPER Support for the CSS image orientation property DEVELOPER New App Manager allows you to deploy and debug HTML5 webapps on Firefox OS phones and the Firefox OS Simulator DEVELOPER IndexedDB can now be used as a "optimistic" storage area so it doesn't require any prompts and data is stored in a pool with LRU eviction policy, in short temporary storage FIXED When displaying a standalone image, Firefox matches the EXIF orientation information contained within the JPEG image (298619) FIXED Text Rendering Issues on Windows 7 with Platform Update KB2670838 (MSIE 10 Prerequisite) or on Windows 8.1 (812695) FIXED Improved page load times due to no longer decoding images that aren't visible (847223) FIXED AudioToolbox MP3 backend for OSX (914479) FIXED Various security fixes Fixed in Firefox 26 MFSA 2013-117 Mis-issued ANSSI/DCSSI certificate MFSA 2013-116 JPEG information leak MFSA 2013-115 GetElementIC typed array stubs can be generated outside observed typesets MFSA 2013-114 Use-after-free in synthetic mouse movement MFSA 2013-113 Trust settings for built-in roots ignored during EV certificate validation MFSA 2013-112 Linux clipboard information disclosure though selection paste MFSA 2013-111 Segmentation violation when replacing ordered list elements MFSA 2013-110 Potential overflow in JavaScript binary search algorithms MFSA 2013-109 Use-after-free during Table Editing MFSA 2013-108 Use-after-free in event listeners MFSA 2013-107 Sandbox restrictions not applied to nested object elements MFSA 2013-106 Character encoding cross-origin XSS attack MFSA 2013-105 Application Installation doorhanger persists on navigation MFSA 2013-104 Miscellaneous memory safety hazards (rv:26.0 / rv:24.2)
2013-11-02Update to 25.0ryoon1-4566/+67
* Enable pulseaudio by default, OSS support is dropped, and ALSA support on NetBSD does not work properly for me * Enable GStremer support for non-webm and non-theora video support * Create alsa option, and enabled on Linux by default Changelog: NEW Web Audio support NEW The find bar is no longer shared between tabs CHANGED If away from Firefox for months, you now will be offered the option to reset it to its default state while preserving your essential information CHANGED Resetting Firefox no longer clears your browsing session DEVELOPER CSS3 background-attachment:local support to control background scrolling DEVELOPER Many new ES6 functions implemented HTML5 iframe document content can now be specified inline FIXED Blank or missing page thumbnails when opening a new tab FIXED Security fixes can be found here Fixed in Firefox 25 MFSA 2013-102 Use-after-free in HTML document templates MFSA 2013-101 Memory corruption in workers MFSA 2013-100 Miscellaneous use-after-free issues found through ASAN fuzzing MFSA 2013-99 Security bypass of PDF.js checks using iframes MFSA 2013-98 Use-after-free when updating offline cache MFSA 2013-97 Writing to cycle collected object during image decoding MFSA 2013-96 Improperly initialized memory and overflows in some JavaScript functions MFSA 2013-95 Access violation with XSLT and uninitialized data MFSA 2013-94 Spoofing addressbar though SELECT element MFSA 2013-93 Miscellaneous memory safety hazards (rv:25.0 / rv:24.1 / rv:17.0.10)
2013-09-21Fix non-official branding build.ryoon1-2/+3
2013-09-21Try to reintrodece PLIST conditionals related to vorbis.ryoon1-2/+3
2013-09-21The about-wordmark resource changed from .svg to .pngmartin1-2/+2
2013-09-19Update to 24.0, ESR edition.ryoon1-81/+181
* Merge some patches via FreeBSD ports. * Tested on NetBSD/amd64 6.99.23 and DragonFly/amd64 3.4.1. * Use system hunspell dictionaries. * DuckDuckGo search window. * Enable system icu support. Changelog: NEW Support for new scrollbar style in Mac OS X 10.7 and newer NEW Implemented Close tabs to the right NEW Social: Ability to tear-off chat windows to view separately by simply dragging them out CHANGED Accessibility related improvements on using pinned tabs (see 577727) CHANGED Removed support for Revocation Lists feature (see 867465) CHANGED Performance improvements on New Tab Page loads (see 791670) DEVELOPER Major SVG rendering improvements around Image tiling and scaling (see 600207 ) DEVELOPER Improved and unified Browser console for enhanced debugging experience, replacing existing Error console DEVELOPER Removed support for sherlock files that are loaded from application or profile directory FIXED Replace fixed-ratio audio resampler in webrtc.org capture code with Speex resampler and eliminate pseudo-44000Hz rate ( see 886886) FIXED 24.0: Security fixes can be found here Fixed in Firefox 24 MFSA 2013-92 GC hazard with default compartments and frame chain restoration MFSA 2013-91 User-defined properties on DOM proxies get the wrong "this" object MFSA 2013-90 Memory corruption involving scrolling MFSA 2013-89 Buffer overflow with multi-column, lists, and floats MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes MFSA 2013-87 Shared object library loading from writable location MFSA 2013-86 WebGL Information disclosure through OS X NVIDIA graphic drivers MFSA 2013-85 Uninitialized data in IonMonkey MFSA 2013-84 Same-origin bypass through symbolic links MFSA 2013-83 Mozilla Updater does not lock MAR file after signature verification MFSA 2013-82 Calling scope for new Javascript objects can lead to memory corruption MFSA 2013-81 Use-after-free with select element MFSA 2013-80 NativeKey continues handling key messages after widget is destroyed MFSA 2013-79 Use-after-free in Animation Manager during stylesheet cloning MFSA 2013-78 Integer overflow in ANGLE library MFSA 2013-77 Improper state in HTML5 Tree Builder with templates MFSA 2013-76 Miscellaneous memory safety hazards (rv:24.0 / rv:17.0.9)
2013-08-29Conditionalize the last remaining PLIST difference on sparc64martin1-2/+2
2013-08-29Skia does not support GL on big endian machines yet - so adjust PLISTmartin1-2/+2
by conditionalizing it.
2013-08-07Update to 23.0ryoon1-120/+309
* Install SDK to firefox-sdk directory. * Split multiple CONFIGURE_ARS's arguments. * Enable libmozjs.so build. Changelog: NEW Mixed content blocking enabled to protects users from man-in-the-middle attacks and eavesdroppers on HTTPS pages (learn more) NEW Options panel created for Web Developer Toolbox CHANGED "Enable JavaScript" preference checkbox has been removed and user-set values will be reset to the default CHANGED Updated Firefox Logo CHANGED Improved about:memory's functional UI CHANGED Simplified interface for notifications of plugin installation CHANGED Enabled DXVA2 on Windows Vista+ to accelerate H.264 video decoding CHANGED Users can now switch to a new search provider across the entire browser CHANGED CSP policies using the standard syntax and semantics will now be enforced CHANGED <input type='file'> rendering improvements (see bug 838675) CHANGED Replace fixed-ratio audio resampler in webrtc.org capture code with Speex resampler and eliminate pseudo-44000Hz rate CHANGED "Load images automatically" and Always show the tab bar" checkboxes removed from preferences and reset to defaults DEVELOPER HTML5 <input type="range"> form control implemented DEVELOPER Write more accessible pages on touch interfaces with new ARIA role for key buttons DEVELOPER Social share functionality DEVELOPER Added unprefixed requestAnimationFrame DEVELOPER Implemented a global browser console DEVELOPER Dropped blink effect from text-decoration: blink; and completely removed <blink> element DEVELOPER New feature in toolbox: Network Monitor FIXED Various security fixes n Firefox 23 MFSA 2013-75 Local Java applets may read contents of local file system MFSA 2013-74 Firefox full and stub installer DLL hijacking MFSA 2013-73 Same-origin bypass with web workers and XMLHttpRequest MFSA 2013-72 Wrong principal used for validating URI for some Javascript components MFSA 2013-71 Further Privilege escalation through Mozilla Updater MFSA 2013-70 Bypass of XrayWrappers using XBL Scopes MFSA 2013-69 CRMF requests allow for code execution and XSS attacks MFSA 2013-68 Document URI misrepresentation and masquerading MFSA 2013-67 Crash during WAV audio file decoding MFSA 2013-66 Buffer overflow in Mozilla Maintenance Service and Mozilla Updater MFSA 2013-65 Buffer underflow when generating CRMF requests MFSA 2013-64 Use after free mutating DOM during SetBody MFSA 2013-63 Miscellaneous memory safety hazards (rv:23.0 / rv:17.0.8)
2013-06-26Update to 22.0ryoon1-71/+362
* On NetBSD WebRTC support is disabled, because libxul.so has some errors in link stage. WebRTC support should be tested on non-NetBSD platforms. * It seems that OSS sound support is not working properly on NetBSD. Changelog: NEW WebRTC is now enabled by default! NEW Windows: Firefox now follows display scaling options to render text larger on high-res displays NEW Mac OS X: Download progress in Dock application icon NEW HTML5 audio/video playback rate can now be changed NEW Social services management implemented in Add-ons Manager NEW asm.js optimizations (OdinMonkey) enabled for major performance improvements CHANGED Improved WebGL rendering performance through asynchronous canvas updates CHANGED Plain text files displayed within Firefox will now word-wrap CHANGED For user security, the |Components| object is no longer accessible from web content CHANGED Pointer Lock API can now be used outside of fullscreen DEVELOPER CSS3 Flexbox implemented and enabled by default DEVELOPER New Web Notifications API implemented DEVELOPER Added clipboardData API for JavaScript access to a user's clipboard DEVELOPER New built-in font inspector HTML5 New HTML5 <data> and <time> elements FIXED Various security fixes FIXED Scrolling using some high-resolution-scroll aware touchpads feels slow (829952) Fixed in Firefox 22 MFSA 2013-62 Inaccessible updater can lead to local privilege escalation MFSA 2013-61 Homograph domain spoofing in .com, .net and .name MFSA 2013-60 getUserMedia permission dialog incorrectly displays location MFSA 2013-59 XrayWrappers can be bypassed to run user defined methods in a privileged context MFSA 2013-58 X-Frame-Options ignored when using server push with multi-part responses MFSA 2013-57 Sandbox restrictions not applied to nested frame elements MFSA 2013-56 PreserveWrapper has inconsistent behavior MFSA 2013-55 SVG filters can lead to information disclosure MFSA 2013-54 Data in the body of XHR HEAD requests leads to CSRF attacks MFSA 2013-53 Execution of unmapped memory through onreadystatechange event MFSA 2013-52 Arbitrary code execution within Profiler MFSA 2013-51 Privileged content access and execution via XBL MFSA 2013-50 Memory corruption found using Address Sanitizer MFSA 2013-49 Miscellaneous memory safety hazards (rv:22.0 / rv:17.0.7)
2013-06-21Bump PKGREVISION.ryoon1-7/+1
* Add NetBSD/sparc64 support from martin@. Almost all functionalities work fine, but https handling. * Enable system jpeg support. This is accidentally disabled.
2013-05-23Bump PKGREVISION.ryoon1-1/+2
* Remove reference to devel/xulrunner. * Move some common files for firefox/xulrunner-21.0. * Move patches from devel/sulrunner. * Take MAINTAINERship.
2013-05-19Fix gnome option.ryoon1-1/+3
This is related to PR pkg/47801. But devel/xulrunner is broken now.
2013-05-19Update to 21.0ryoon1-732/+6039
* This release of firefox is built with internal xulrunner. Because separated (system) xulrunner has prefs and chrome load problem. * gnome option is broken in libnkmozgnomevfs.so build. Changelog: NEW The Social API now supports multiple providers NEW Enhanced three-state UI for Do Not Track (DNT) NEW Firefox will suggest how to improve your application startup time if needed NEW Preliminary implementation of Firefox Health Report CHANGED Ability to restore removed thumbnails on New Tab Page CHANGED CSS -moz-user-select:none selection changed to improve compatibility with -webkit-user-select:none (bug 816298) CHANGED Graphics related performance improvements (bug 809821) CHANGED Removed E4X support from Spidermonkey DEVELOPER Implemented Remote Profiling DEVELOPER Integrated add-on SDK loader and API libraries into Firefox HTML5 Added support for <main> element HTML5 Implemented scoped stylesheets HTML5 Added support for window.crypto.getRandomValues FIXED Some function keys may not work when pressed (833719) FIXED Browsing and Download history clearing needs unification to avoid confusion on clearing download history (847627) FIXED 21.0: Security fixes can be found here Fixed in Firefox 21 MFSA 2013-48 Memory corruption found using Address Sanitizer MFSA 2013-47 Uninitialized functions in DOMSVGZoomEvent MFSA 2013-46 Use-after-free with video and onresize event MFSA 2013-45 Mozilla Updater fails to update some Windows Registry entries MFSA 2013-44 Local privilege escalation through Mozilla Maintenance Service MFSA 2013-43 File input control has access to full path MFSA 2013-42 Privileged access for content level constructor MFSA 2013-41 Miscellaneous memory safety hazards (rv:21.0 / rv:17.0.6)
2013-04-05Update to 20.0ryoon1-78/+83
Changelog: NEW Per-window Private Browsing. Learn more. NEW New download experience. Learn more. NEW Ability to close hanging plugins, without the browser hanging CHANGED Continued performance improvements around common browser tasks (page loads, downloads, shutdown, etc.) DEVELOPER Continued implementation of draft ECMAScript 6 - clear() and Math.imul DEVELOPER New JavaScript Profiler tool HTML5 getUserMedia implemented for web access to the user's camera and microphone (with user permission) HTML5 <canvas> now supports blend modes HTML5 Various <audio> and <video> improvements FIXED Details button on Crash Reporter (793972) FIXED Unity plugin doesn't display in HiDPI mode (829284) FIXED 20.0: Security fixes can be found here Fixed in Firefox 20 MFSA 2013-40 Out-of-bounds array read in CERT_DecodeCertPackage MFSA 2013-39 Memory corruption while rendering grayscale PNG images MFSA 2013-38 Cross-site scripting (XSS) using timed history navigations MFSA 2013-37 Bypass of tab-modal dialog origin disclosure MFSA 2013-36 Bypass of SOW protections allows cloning of protected nodes MFSA 2013-35 WebGL crash with Mesa graphics driver on Linux MFSA 2013-34 Privilege escalation through Mozilla Updater MFSA 2013-33 World read and write access to app_tmp directory on Android MFSA 2013-32 Privilege escalation through Mozilla Maintenance Service MFSA 2013-31 Out-of-bounds write in Cairo library MFSA 2013-30 Miscellaneous memory safety hazards (rv:20.0 / rv:17.0.5)
2013-02-22Update to 19.0ryoon1-5/+26
Sync with xulrunner-19.0.
2013-01-10Update to 18.0ryoon1-17/+14
Sync with devel/xulrunner 18.0.
2012-11-22fix lib/firefox/chrome/browser/content/branding/about-background.pngabs1-2/+1
2012-11-21Update to 17.0ryoon1-17/+54
* Add --enable-pulseaudio configure option (functionality is not tested) Changelog: NEW First revision of the Social API and support for Facebook Messenger NEW Click-to-play blocklisting implemented to prevent vulnerable plugin versions from running without the user's permission (see blog post) CHANGED Updated Awesome Bar experience with larger icons CHANGED Mac OS X 10.5 is no longer supported DEVELOPER JavaScript Maps and Sets are now iterable DEVELOPER SVG FillPaint and StrokePaint implemented DEVELOPER Improvements that make the Web Console, Debugger and Developer Toolbar faster and easier to use DEVELOPER New Markup panel in the Page Inspector allows easy editing of the DOM HTML5 Sandbox attribute for iframes implemented, enabling increased security FIXED Over twenty performance improvements, including fixes around the New Tab page FIXED Pointer lock doesn't work in web apps (769150) FIXED Page scrolling on sites with fixed headers (780345)
2012-10-12Update to 16.0.1ryoon1-2/+30
Changelog: FIXED 16.0.1: Vulnerability outlined here https://blog.mozilla.org/security/2012/10/10/security-vulnerability-in-firefox-16/ NEW Firefox on Mac OS X now has preliminary VoiceOver support turned on by default NEW Initial web app support (Windows/Mac/Linux) NEW Acholi and Kazakh localizations added CHANGED Improvements around JavaScript responsiveness through incremental garbage collection DEVELOPER New Developer Toolbar with buttons for quick access to tools, error count for the Web Console, and a new command line for quick keyboard access DEVELOPER CSS3 Animations, Transitions, Transforms and Gradients unprefixed in Firefox 16 DEVELOPER Recently opened files list in Scratchpad implemented FIXED 16.0.1: Vulnerability outlined here https://blog.mozilla.org/security/2012/10/10/security-vulnerability-in-firefox-16/ FIXED Debugger breakpoints do not catch on page reload (783393) FIXED No longer supporting MD5 as a hash algorithm in digital signatures (650355) FIXED Opus support by default (772341) FIXED Reverse animation direction has been implemented (655920) FIXED Per tab reporting in about:memory (687724) FIXED User Agent strings for pre-release Firefox versions now show only major version (728831)
2012-08-28Fix PLIST for !nobrandingabs1-2/+1
2012-08-28Update to 15.0ryoon1-5/+92
* Use patches from https://bugzilla.mozilla.org/show_bug.cgi?id=753046 * Fix firefox.sh Changelog: NEW Preliminary native PDF support (Aurora/Beta only) NEW Support for SPDY networking protocol v3 NEW WebGL enhancements, including compressed textures for better performance CHANGED Optimized memory usage for add-ons DEVELOPER JavaScript debugger integrated into developer tools DEVELOPER New layout view added to Inspector DEVELOPER The CSS word-break property has been implemented. DEVELOPER High precision event timer implemented DEVELOPER New responsive design tool allows web developers to switch between desktop and mobile views of sites HTML5 Native support for the Opus audio codec added HTML5 The <source> element now supports the media attribute HTML5 The <audio> and <video> elements now support the played attribute
2012-07-20fix PLIST for official-mozilla-branding. Bump PKGREVISIONabs1-2/+1
2012-07-18Update to 14.0.1ryoon1-7/+44
Changelog: NEW Google searches now utilize HTTPS NEW Full screen support for Mac OS X Lion implemented NEW Plugins can now be configured to only load on click (requires an about:config change) NEW The Awesome Bar now auto-completes typed URLs CHANGED Improved site identity manager, to prevent spoofing of an SSL connection with favicons DEVELOPER Pointer Lock API implemented DEVELOPER New API to prevent your display from sleeping DEVELOPER New text-transform and font-variant CSS improvements for Turkic languages and Greek FIXED Various security fixes FIXED GIF animation can gets stuck when src and image size are changed (743598) FIXED OS X: nsCocoaWindow::ConstrainPosition uses wrong screen in multi-display setup (752149) FIXED CSS :hover regression when an element's class name is set by Javascript (758885
2012-06-05fix !nobranding PLISTabs1-2/+1
2012-06-05Sync with devel/xulrunner-13.0ryoon1-36/+61
2012-04-26Update to 12.0ryoon1-35/+54
Changelog: * Page Source now has line numbers * Line breaks are now supported in the title attribute * Improvements to "Find in Page" to center search result * URLs pasted into the download manager window are now automatically downloaded * Support for the text-align-last CSS property has been added * Various security fixes * Some TinyMCE-based editors failed to load (739141)
2012-03-15Update to 11.0ryoon1-3/+35
* Follow devel/xulrunner update.
2012-03-10Bump PKGREVISIONryoon1-1/+2
* Restore --disable-official-branding.
2012-03-06Update xulrunner 10.0.2ryoon1-6/+59
* Improve sparc64 support. Thank you, martin@ Changelog: * Fix security bugs * Other improvements and bugfixes
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-12 07:02:45 +0000