5 | | [https://www.mozilla.org/en-US/firefox/38.0beta/releasenotes/] |
| 5 | {{{ |
| 6 | SECURITY FIXES |
| 7 | 2015-58 Mozilla Windows updater can be run outside of application |
| 8 | directory |
| 9 | 2015-57 Privilege escalation through IPC channel messages |
| 10 | 2015-56 Untrusted site hosting trusted page can intercept webchannel |
| 11 | responses |
| 12 | 2015-55 Buffer overflow and out-of-bounds read while parsing MP4 |
| 13 | video metadata |
| 14 | 2015-54 Buffer overflow when parsing compressed XML |
| 15 | 2015-53 Use-after-free due to Media Decoder Thread creation during |
| 16 | shutdown |
| 17 | 2015-52 Sensitive URL encoded information written to Android logcat |
| 18 | 2015-51 Use-after-free during text processing with vertical text |
| 19 | enabled |
| 20 | 2015-50 Out-of-bounds read and write in asm.js validation |
| 21 | 2015-49 Referrer policy ignored when links opened by middle-click and |
| 22 | context menu |
| 23 | 2015-48 Buffer overflow with SVG content and CSS |
| 24 | 2015-47 Buffer overflow parsing H.264 video with Linux Gstreamer |
| 25 | 2015-46 Miscellaneous memory safety hazards (rv:38.0 / rv:31.7) |
| 26 | }}} |
| 27 | |
| 28 | [https://www.mozilla.org/en-US/firefox/38.0/releasenotes/] |
| 29 | |
| 30 | {{{ |
| 31 | Version 38.0, first offered to Release channel users on May 12, 2015 |
| 32 | |
| 33 | NEW |
| 34 | New tab-based preferences |
| 35 | |
| 36 | Ruby annotation support |
| 37 | |
| 38 | Base for the next ESR release. |
| 39 | |
| 40 | CHANGED |
| 41 | autocomplete=off is no longer supported for username/password fields |
| 42 | |
| 43 | URL parser avoids doing percent encoding when setting the Fragment |
| 44 | part of the URL, and percent decoding when getting the Fragment in |
| 45 | line with the URL spec |
| 46 | |
| 47 | RegExp.prototype.source now returns "(?:)" instead of the empty |
| 48 | string for empty regular expressions |
| 49 | |
| 50 | Improved page load times via speculative connection warmup |
| 51 | |
| 52 | HTML5 |
| 53 | WebSocket now available in Web Workers |
| 54 | |
| 55 | BroadcastChannel API implemented |
| 56 | |
| 57 | Implemented srcset attribute and <picture> element for responsive |
| 58 | images |
| 59 | |
| 60 | Implemented DOM3 Events KeyboardEvent.code |
| 61 | |
| 62 | Mac OS X: Implemented a subset of the Media Source Extensions (MSE) |
| 63 | API to allow native HTML5 playback on YouTube |
| 64 | |
| 65 | Implemented Encrypted Media Extensions (EME) API to support encrypted |
| 66 | HTML5 video/audio playback (Windows Vista or later only) |
| 67 | |
| 68 | Automatically download Adobe Primetime Content Decryption Module |
| 69 | (CDM) for DRM playback through EME (Windows Vista or later only) |
| 70 | |
| 71 | Developer |
| 72 | Optimized-out variables are now visible in Debugger UI |
| 73 | |
| 74 | XMLHttpRequest logs in the web console are now visually labelled and |
| 75 | can be filtered separately from regular network requests |
| 76 | |
| 77 | WebRTC now has multistream and renegotiation support |
| 78 | |
| 79 | copy command added to console |
| 80 | }}} |