Release notes

These release notes are summaries of the most important changes for public releases.

v2025.01.04 Published 2025-01-04
This is a development, bugfix and security release.

Implemented Regular Expression "match indices" (/d) feature.
Updated handling of referrer policies to adhere to the updated spec.
CSS font variations keywords no longer throw an error. See implementation notes.
CSS border-radius will now also apply to element outlines.
Updated NSS to 3.90.5 (unofficial) to pick up some security fixes.
Refreshed the built-in list of effective top-level domains.
Fixed several application crashes.
Reduced unnecessary debug/informative messages in release builds (WebGL and CSP).
Backed out building against ffmpeg 6.0 and ffvpx 6.0 for causing a video playback regression on full-range videos (levels 0-255).
Cleaned up a large amount of leftover Boot2Gecko code, simplifying code paths throughout the code base.
Ported the "ghostbuster" functionality from Pale Moon 33.4.0.
Built on UXP commit: b3b852b877
Security issues addressed: CVE-2024-11693 and CVE-2024-11704 (DiD).

Implementation notes

The CSS font variations keywords (woff2-variations, truetype-variations, etc.) allow webmasters to indicate format hints for @font-face font resources so authors can provide alternative resources for browsers that don't support tech(variations). The intent of these hints is to provide an alternate font with variations in addition to regular fonts without. Unfortunately, some webmasters don't indicate a base font the variation font face would be an alternate for, which resulted in Basilisk throwing an error on the only @font-face src entry provided, in turn having the web font not being loaded at all (because no valid entry was found), breaking website layout. From this version onwards, we parse the -variations keywords allowing variation alternative font-faces to be loaded, even if no base font was specified. To webmasters only supplying @font-face entries with variations keywords: please understand the intent of this CSS 4 spec and always provide a base font entry (graceful fallback).

v2024.11.23 Published 2024-11-23
This is a minor security and bugfix update.

Cleaned up some old unused code for pre-Windows 7 versions in the Windows installer.
Built on UXP commit: df16df5693
Improved handling of multipart/mixed documents. (CVE-2024-10461 and CVE-2016-2816) DiD
Addressed CVE-2024-10463.

Old Releases

Old release notes from Basilisk Development Team releases can be found here.

Releases notes from releases by Moonchild Productions can be found here.