Releases: wicknix/SeaLion
SeaLion-33.5.1
This release is current with the latest UXP. You can find out what has changed from UXP's release notes found here.
Also added support for Retina displays.
Add-ons, extensions, and themes can be found here.
Older browsers that can't see the downloads click here: https://github.com/wicknix/SeaLion/releases/expanded_assets/33.5.1
Do to hardware and time constraints i will no longer be providing Linux binaries. 3rd party builds are welcome.
Linux versions (x86 & ppc) courtesy of Xeno74 can be found here:
SeaLion-33.4.0
This release is current with the latest UXP. You can find out what has changed from UXP's release notes found here.
Add-ons, extensions, and themes can be found here.
Older browsers that can't see the downloads click here: https://github.com/wicknix/SeaLion/releases/expanded_assets/33.4.0
Do to hardware and time constraints i will no longer be providing x86_64 Linux binaries.
PowerPC and x86_64 Linux builds courtesy of Xeno74.
SeaLion-33.2.1
This release is current with the latest UXP. You can find out what has changed from UXP's release notes found here.
Add-ons, extensions, and themes can be found here.
Do to hardware and time constraints, i will no longer be providing x86 Linux binaries.
PPC 32 bit Void Linux build and x86_64 Linux build courtesy of Xeno74
SeaLion-33.0.0
This is a new milestone release. It involves over 250 commits, of which the most important ones are highlighted here.
New features:
- Implemented a restricted version of the asynchronous clipboard API (navigator.clipboard). This API is restricted to writing only for obvious security considerations. It supports both plaintext and the standard DataTransfer methods. We did not implement the reinvented wheel concept of ClipboardItem objects.
- Implemented support for SHA-2 (SHA-256/SHA-512/etc.) signatures for OCSP stapled responses.
- Implemented PromiseRejectionEvent. Although this is rarely actually used, some common JS libraries (you know who you are!) use it as a feature level canary and start loading (broken!) Promise shims if it is not found, causing compatibility issues and broken websites due to the shims.
Fixes:
- Aligned microtasks and Promises scheduling with the current spec and expected behavior.
- We now no longer send click events to top levels of the document hierarchy when using non-primary buttons (use auxclick, instead, to capture these events).
- Greatly improved the performance of box shadows.
- Fixed several issues related to focus and content selection.
- Fixed issues with the use of focus-within caused by unexpected processing of DOM events.
- Fixed an issue with CSP not behaving as-expected when using importScripts(), and fixed a number of additional CSP-related issues.
- Greatly improved the performance of file/data uploads over HTTP/2 (most of the secure websites out there).
- Fixed an web compatibility issue with CORS preflights not sending the original request's referrer policy or referrer header.
- Fixed a crash due to clamping code introduced for SetInterval and SetTimeout timers.
- Fixed a spec compliance issue with StructureClone.
- Fixed crashes when dynamic imports are canceled (e.g. by navigation).
Other changes:
- Changed to now have its .files property be writable following a spec change and recommendation.
- We are now requiring and building against the C++17 language standard.
- Updated the in-tree ffvpx lib to 6.0.
- Updated the IntersectionObserver interface to now also accept documents for the observer root instead of only HTML elements.
- Cleaned up various bits of code surrounding GMP, memory allocation, system libraries, vestigial Android code, freetype2 and developer tools.
- Improved efficiency of handling D3D textures.
- Added initial and experimental Mac PowerPC and Big Endian support.
- Security issues addressed: CVE-2024-0746, CVE-2024-0741, CVE-2024-0743 DiD, CVE-2024-0750 DiD, and CVE-2024-0753.
- UXP Mozilla security patch summary: 3 fixed, 2 DiD, 12 not applicable.
Grab the SeaLion-Extras.zip for some popular compatible extensions, themes, and Flash installers (no time bomb versions). Some extensions had to be modified to work with this release. If you notice incompatible extensions that use to work, download this archive again and reinstall those extensions.
Older browsers that can't see the downloads click here: https://github.com/wicknix/SeaLion/releases/expanded_assets/33.0.0
Edit: The PPC64 and GTK2 non altivec builds are courtesy of Xeno74.
SeaLion-32.5.1
Changes/fixes:
Restricted protocol fallback for TLS. SeaLion (by default) allows TLS 1.3 to fall back to earlier protocol versions during the initial handshake.
UXP longer supports the data: protocol inside SVG's statements.
Enabled more validation/error checking for WebGL to prevent potential crashes.
Improved secure context checking for iframes.
Fixed the handling of relative paths in URLs starting with multiple forward slashes.
Security issues addressed: CVE-2023-6204, CVE-2023-6210, CVE-2023-6209 and CVE-2023-6205 DiD
UXP Mozilla security patch summary: 3 fixed, 1 DiD, 14 not applicable.
Grab the SeaLion-Extras.zip for some popular compatible extensions, themes, and Flash installers (no time bomb versions).
New: Added Secret Agent extension which enhances the privacy of your web surfing.
I’ve attached a custom userChrome.css if you want to adjust fonts, tab size, bookmark bar size, etc.
Older browsers that can't see the downloads click here: https://github.com/wicknix/SeaLion/releases/expanded_assets/32.5.1
PowerPC Linux builds are courtesy of xeno74.
SeaLion-32.5.0
Changes/fixes from upstream UXP
- Added an initial implementation of the ReadableStreams API, improving web compatibility with sites that apparently use this API in utilitarian fashion.
- Added support for transparency in WebM videos for the edge case of using
- Added support for crypto.randomUUID to allow website scripting to generate random UUIDs (universally unique identifiers) through the WebCrypto interface.
- Implemented timer nesting and clamping for workers, preventing timer hangs on bas website code.
- Improved handling of drawing SVG images on canvases without explicit width or height attributes. We now follow the css-sizing-3 Intrinsic Sizes spec.
- Improved performance of our memory allocator.
- Updated libvpx to 1.6.1.
- Cleaned up and updated some media playback code.
- Removed the inclusion of GMP (Gecko Media Plugin) support as it was only in use for EME/DRM and WebRTC, neither of which is supported.
- Removed the last vestiges of EME/DRM code from UXP, since this will never be supported in any application building on it due to the media industry's draconic policies around FOSS.
- Removed simd.js, moving actually used SIMD handling to C++.
- Removed the use of libav in our source, replacing its supply of FFT with the equivalent from FFMpeg.
- Fixed potential type confusion in IonMonkey due to 3-byte opcodes.
- Fixed an issue with tooltips persisting even if the browser window would have lost focus.
- Fixed PerformanceObserver navigation and resource timing (default disabled for privacy); our implementation now fully passes conformance tests.
- Fixed an issue where top-level SVG images would not be correctly clipped by positioned elements, giving the impression of wrong z-ordering as the SVG would overlap other elements.
- Dev: Updated setInterval to fall back to 0 if no duration is supplied.
- Dev: Updated ResizeObserver to a recent spec change, now returning an array of results for borderBoxSize and contentBoxSize instead of an object.
- Dev: Updated Intl.NumberFormat and DefaultNumberOption() to follow spec updates. Most importantly for web compatibility, we now allow the "maximumFractionDigits" option in Intl.NumberFormat to be less than the default minimum fraction digits for the chosen locale, following the general consensus in TC39 around this issue.
- Increased leniency (removed upper limit) of GLSL versions as they tend to be fully backwards compatible.
- Fixed various crashes.
- Added a safeguard to the sec-gpc header (Global Privacy Control) so it cannot be inadvertently overwritten.
- Security fixes: addressed CVE-2023-5722, CVE-2023-5723, CVE-2023-5724, CVE-2023-5727 and several other issues without a CVE number assigned to them.
- UXP Mozilla security patch summary: 6 fixed, 2 DiD, 19 not applicable.
U
Grab the SeaLion-Extras.zip for some popular compatible extensions, themes, and Flash installers (no time bomb versions)
Updated the archive with a few more extensions (added mouse gestures suite and page navigation buttons)
Older browsers that can't see the downloads click here: https://github.com/wicknix/SeaLion/releases/expanded_assets/32.5.0
PowerPC 64bit build contributed by xeno74 (works on debian / fedora / opensuse)
PowerPC 32bit Void Linux build also contributed by xeno74
SeaLion-32.4.1
This is a bug fix and security update.
Changes/fixes from upstream UXP:
- Fixed an issue in BigInt typedArray constructors.
- Added some safety checks for Performance Observers.
- Fixed JSON BigInt regressions.
- Fixed missing BigInt increment/decrement operations.
- Added WASM sign extension opcodes.
- Fixed an issue with dead Promise wrappers in JavaScript DiD
- Fixed an issue with Alternative Services DiD
- Fixed an issue with libvpx (address CVE-2023-5217) DiD
Grab the SeaLion-Extras.zip for some popular compatible extensions, themes, and Flash installers (no time bomb versions)
Also added a GreaseMonkey script to fix discord on older browsers to the SeaLion-Extras.zip
The PowerPC Linux builds will run on Debian 12 / MintPPC / Fienix 6 / openSUSE Tumbleweed / Fedora 28
The ppc64 build and Void ppc32 build was contributed by xeno74
Older browsers that can't see the downloads click here: https://github.com/wicknix/SeaLion/releases/expanded_assets/32.4.1
SeaLion-32.4.0.1
32.4.0.1 (2023-09-19)
This is a point release update to address a critical security vulnerability.
Fixed a WebP decoder issue (CVE 2023-4863)
This is a major development update, further improving web compatibility.
Changes/fixes from upstream UXP:
- Implemented the BigInt primitive type for JavaScript.
- Implemented Big(U)Int64 array support.
- Implemented ergonomic brand checks for JavaScript class fields.
- Aligned the Performance API with the Timeline v2 spec.
- Aligned the handling of flex/grid percentages resolving against the parent with other browsers.
- Added 2 preferences to allow users to disable CSS animations and transitions.
- Fixed an important, intermittent JavaScript crash related to garbage collection.
- Fixed several crashes.
- Fixed several debug build related issues.
- Added the .xll file extension to the executable extensions list.
- Security issues addressed: several potential security issues that do not have a CVE number. DiD
- UXP Mozilla security patch summary: 1 fixed, 3 DiD, 17 not applicable.
SeaLion specific changes:
- Updated lots of internal URL's (release notes, updater, etc).
- Fixed GreaseMonkey extension to display on toolbar and actually install scripts.
- Added SeaLion throbbers to some of the themes.
- Added StartPage search extension
- Updated SeaLion-Extras.zip with a few more extensions and revised the readme.txt
Grab the SeaLion-Extras.zip for some popular compatible extensions, themes, and Flash installers (no time bomb versions)
Older browsers that can't see the downloads click here: https://github.com/wicknix/SeaLion/releases/expanded_assets/32.4.0
SeaLion-32.3.1
Small bug fix release with UI improvements and improved Linux icons along with BigInt support.
Also updated sealion-extras.zip with a couple new extensions and themes.
The x86_64 Linux build was built on Debian 11 with gtk2. It should run on most popular distros.
The 32-bit PowerPC build was built on Debian 12 with gtk2 and will also run on Fienix 6 and MintPPC.
Xeno74 built a VoidPPC (32-bit) version which i've attached below.
The MacOS builds will run on 10.7 - 12.6
Grab the SeaLion-Extras.zip for some popular compatible extensions, themes, and Flash installers (no time bomb versions)
Older browsers that can't see the downloads click here: https://github.com/wicknix/SeaLion/releases/expanded_assets/32.3.1
SeaLion-32.2.2
Changes:
Web compatibility and scripting improvements:
Implemented geometry .from* static constructors for web compatibility.
Implemented partial support for CSS calc() in color keywords.
Implemented Array "find from last" feature (findLast and findLastIndex).
Implemented Object.hasOwn(object,property).
Implemented several additional Intl API methods and functions. This improves web compatibility with sites making use of things like hourCycle, advanced DateTimeFormat, Intl.Locale, and Intl as a constructor.
Removed support for Mozilla "experiment" type extensions.
Improved the JavaScript garbage collector's sweeping. This should fix a few intermittent crashes and improve performance.
Security issues addressed: CVE-2023-37208.
Grab the SeaLion-Extras.zip for some popular compatible extensions, themes, and Flash installers (no time bomb versions)
The PowerPC Linux build is 32-bit, and was built on Debian 12. It should run on most any modern distro. (Debian Sid / MintPPC / Fienix)
I also included a ppc32 Linux build for Void. This will be the last as Void is now EOL.
Older browsers that can't see the downloads click here: https://github.com/wicknix/SeaLion/releases/expanded_assets/32.2.2