Leaderboard

New build of Serpent/UXP for XP! Test binary: Win32 https://o.rthost.win/basilisk/basilisk52-g4.8.win32-git-20250712-3219d2d-uxp-b9ebe5b259-xpmod.7z Win64 https://o.rthost.win/basilisk/basilisk52-g4.8.win64-git-20250712-3219d2d-uxp-b9ebe5b259-xpmod.7z source code that is comparable to my current working tree is available here: https://github.com/roytam1/UXP/commits/custom IA32 Win32 https://o.rthost.win/basilisk/basilisk52-g4.8.win32-git-20250712-3219d2d-uxp-b9ebe5b259-xpmod-ia32.7z source code that is comparable to my current working tree is available here: https://github.com/roytam1/UXP/commits/ia32 NM28XP build: Win32 https://o.rthost.win/palemoon/palemoon-28.10.7a1.win32-git-20250712-d849524bd-uxp-b9ebe5b259-xpmod.7z Win32 IA32 https://o.rthost.win/palemoon/palemoon-28.10.7a1.win32-git-20250712-d849524bd-uxp-b9ebe5b259-xpmod-ia32.7z Win32 SSE https://o.rthost.win/palemoon/palemoon-28.10.7a1.win32-git-20250712-d849524bd-uxp-b9ebe5b259-xpmod-sse.7z Win64 https://o.rthost.win/palemoon/palemoon-28.10.7a1.win64-git-20250712-d849524bd-uxp-b9ebe5b259-xpmod.7z Win7+ x64 AVX2 https://o.rthost.win/palemoon/palemoon-28.10.7a1.win64-git-20250712-d849524bd-uxp-b9ebe5b259-w7plus-avx2.7z Official UXP changes picked since my last build: - Issue #2106 - Part 1: Un-prefix -moz-user-select (cc55a380f6) - Issue #2106 - Part 2: Align value names (17b594b705) - No issue - Fix mixing of tabs with space-indented code. (552cb8dbcc) - Issue #2045 - Part 1: Revert "Temporarily force hidden elements to be actually hidden." (dd2cf17d30) - Issue #2045 - Part 2: Add handling and storage for the revert unit and value (7f3f90eed4) - Issue #2045 - Part 3: Implement cascade origin tracking to CSS parser (b0f0972314) - Issue #2045 - Part 4: Parse "revert" in property values wherever "unset" is allowed (9105c58a30) - Issue #2045 - Part 5: Serialize shorthands using "revert" like those containing "unset" (801d4a2db8) - Issue #2045 - Part 6: Treat "revert" values as the same as "unset" when encountered in the rule node (c4b6135c99) - Issue #2045 - Part 7: Override revert values during presentation hint cascade (166e98d2b9) - Issue #2045 - Part 8: Remap revert keyword values to a higher cascade level (a47f44e93d) - Issue #2045 - Part 9: Include the revert keyword in the list of accepted values for CSS properties returned by inDOMUtils (5346e55655) - Issue #2045 - Part 10: Regenerate devtools CSS database and include the revert keyword in related devtools code (f0b8d1df2c) - Issue #2106 - Part 3: Add 'contain' as user-select value, retain 'element' (e6b48fcc95) - [devtools] Further improve special character escaping in "copy as curl". (2d9cb22a28) - No Issue - Add detection for medium in border shorthand (9f7430f8b9) - Issue #2124 - Adjust overflow parser to handle two values (f4ffb1ec16) - Issue #2662 - Implement axis-shorthand parsing (7c52fd934f) - Issue #2124/2662: Optimize overflow shorthand parsing and serialization (7626c99ceb) - Issue #2124/2662: Cleaning of code (dae72b452c) - Issue #2106 - Follow-up: Additional Un-prefixing (1a5b3dcae6) - Issue #2106 - Follow-up: Un-prefix DOM Attribute MozUserSelect (abb891ff26) - Issue #2106 - Follow-up: Additional contain Keyword Entries (f1815317c3) - Issue #2106 - Clean-up: Remove Defunct -moz-user-select CSS Directives (8f46cd0d63) - Issue #2106 - Clean-up: Un-prefix -moz-user-select in Comments (b11affbdf3) - Issue #2780: Add back the mismatch overflow handling in nsRuleNode.cpp (c3590da576) - Issue #2757: Create a new basicShape of type inset then set inset coords to zero. (67421b3048) - Issue #2757 - Follow-up: Add clip-path test (manual QA) (3f67905afc) No official Pale-Moon changes picked since my last build. No official Basilisk changes picked since my last build. My changes picked since my last build: - gfx: relax DrawTargetCairo::IsValid() check, fixes crash when loading spectrumsurveys.com (10b96192dd) - layout: plug back alias of -moz-user-select so it won't break pages/extensions relying on this (4c8df426a8) Update Notice: - You may delete file named icudt*.dat inside program folder when updating from old releases. * Notice: From now on, UXP rev will point to `custom` branch of my UXP repo instead of MCP UXP repo, while "official UXP changes" shows only `tracking` branch changes.

New build of post-deprecated Serpent/moebius for XP! * Notice: This repo will not be built on regular schedule, and changes are experimental as usual. ** Current moebius patch level should be on par with 52.9, but some security patches can not be applied/ported due to source milestone differences between versions. Test binary: Win32 https://o.rthost.win/basilisk/basilisk55-win32-git-20250712-6129895b4-xpmod.7z Win64 https://o.rthost.win/basilisk/basilisk55-win64-git-20250712-6129895b4-xpmod.7z repo: https://github.com/roytam1/basilisk55 Repo changes: - ported from UXP: Issue #2106 - Part 1: Un-prefix -moz-user-select (cc55a380) (cfadbb5d6) - ported from UXP: Issue #2106 - Part 2: Align value names (17b594b7) (3a0677ec7) - import from UXP: No issue - Fix mixing of tabs with space-indented code. (552cb8db) (4634fe9d1) - import from UXP: Issue #2045 - Part 1: Revert "Temporarily force hidden elements to be actually hidden." (dd2cf17d) (29e601bb8) - import from UXP: Issue #2045 - Part 2: Add handling and storage for the revert unit and value (7f3f90ee) (f49dc1068) - ported from UXP: Issue #2045 - Part 3: Implement cascade origin tracking to CSS parser (b0f09723) (13380336f) - import from UXP: - Issue #2045 - Part 4: Parse "revert" in property values wherever "unset" is allowed (9105c58a) - Issue #2045 - Part 5: Serialize shorthands using "revert" like those containing "unset" (801d4a2d) (f780f6a0c) - ported from UXP: Issue #2045 - Part 6: Treat "revert" values as the same as "unset" when encountered in the rule node (c4b6135c) (0ddba686d) - ported from UXP: Issue #2045 - Part 7: Override revert values during presentation hint cascade (166e98d2) (33497a7bb) - import from UXP: Issue #2045 - Part 8: Remap revert keyword values to a higher cascade level (a47f44e9) (7e8276dd1) - import from UXP: Issue #2045 - Part 9: Include the revert keyword in the list of accepted values for CSS properties returned by inDOMUtils (5346e556) (5b3195dad) - ported from UXP: Issue #2045 - Part 10: Regenerate devtools CSS database and include the revert keyword in related devtools code (f0b8d1df) (e92c563a4) - import from UXP: Issue #2106 - Part 3: Add 'contain' as user-select value, retain 'element' (e6b48fcc) (f073823cd) - ported from UXP: [devtools] Further improve special character escaping in "copy as curl". (2d9cb22a) (28bf4bcf2) - ported from UXP: No Issue - Add detection for medium in border shorthand (9f7430f8) (4f0690a20) - import from UXP: Issue #2124 - Adjust overflow parser to handle two values (f4ffb1ec) (ae483ab3b) - ported from UXP: Issue #2662 - Implement axis-shorthand parsing (7c52fd93) (f7844356c) - ported from UXP: Issue #2124/2662: Optimize overflow shorthand parsing and serialization (7626c99c) (55a3af5f7) - ported from UXP: Issue #2124/2662: Cleaning of code (dae72b45) (9c80beb8f) - ported from UXP: Issue #2106 - Follow-up: Additional Un-prefixing (1a5b3dca) (82ff6f599) - import from UXP: Issue #2106 - Follow-up: Un-prefix DOM Attribute MozUserSelect (abb891ff) (2b505c1fd) - import from UXP: Issue #2106 - Follow-up: Additional contain Keyword Entries (f1815317) (db2c8fdb5) - ported from UXP: Issue #2106 - Clean-up: Remove Defunct -moz-user-select CSS Directives (8f46cd0d) (37991f84a) - import from UXP: Issue #2106 - Clean-up: Un-prefix -moz-user-select in Comments (b11affbd) (477ab51c4) - import from UXP: Issue #2780: Add back the mismatch overflow handling in nsRuleNode.cpp (c3590da5) (0ee810368) - import from UXP: Issue #2757: Create a new basicShape of type inset then set inset coords to zero. (67421b30) (0ea914daf) - import from UXP: Issue #2757 - Follow-up: Add clip-path test (manual QA) (3f67905a) (1b8fbc344) - import from `custom` branch of UXP: gfx: relax DrawTargetCairo::IsValid() check, fixes crash when loading spectrumsurveys.com (10b96192) (6129895b4)

I don't know anything about Python either, but I just uploaded the new `update.py` (with only one line changed) into the GitHub web editor and committed.

... Huh, I see ... This is very puzzling, indeed ; in fact, the "yt-dl.org" domain now auto-redirects to yt-dlp GitHub URLs, e.g. https://yt-dl.org => https://github.com/yt-dlp/yt-dlp , which, of course, is a fork of the original youtube-dl project; I think dirkf doesn't have immediate access to the "yt-dl.org" server (wasn't that one blocked in Germany at some point?), so the answer about who arranged the autoredirection to yt-dlp might be possibly found inside the yt-dlp repo itself (too hot here currently for me to check, sorry ) ... I know; however, I have a small list of test commands I issue with fresh releases of both youtube-dl (nightly branch) and yt-dlp (your "Vista" compatible build) and that same list was used to test your 2025.07.11 compile; that was how I noticed the change in behaviour for " -vU" ... As I'm not proficient in Python (quite the opposite, in fact ), that was what I was about to suggest to you ; glad you got it sorted already ... The same with most "yt-dl.org" links contained inside: https://ytdl-org.github.io/youtube-dl/download.html I know ; I had already modified locally the latest "official" Nightly release (2025.05.05) according to your posted diff on GH; let's hope a py3.4 solution becomes available if evil Google start blocking Chrome > 97 UAs... Best regards !

We need a "benign exploit" page (a page that triggers the bug but doesn't do anything harmful) to test for this vulnerability. We had one for the WebP vulnerability.

@VistaLover That's because of line 37 in `./youtube_dl/update.py`. UPDATE_URL = 'https://yt-dl.org/update/' For some reason it redirects to: https://github.com/yt-dlp/yt-dlp/update/ ---> 404. In version 2025.06.26 (and previous versions) I had it set to: UPDATE_URL = 'https://ytdl-org.github.io/youtube-dl/update/' (also 404, by the way) My version is not supposed to be updated with `-U`. Do you perhaps have any idea how to change `update.py` for my fork to actually make it work with `-U`? [Edit] I think I managed to fix it. Took `update.py` from youtube-dl Nightly as an example. youtube-dl -vU [debug] System config: [] [debug] User config: ['--console-title', '--rm-cache-dir', '-i', '-o', '/dev/shm/test-ytd/%(title)s.%(ext)s', '-f', 'bestvideo[height<=1080][ext=mp4][vcodec^=avc]+bestaudio[ext=m4a]/best[ext=mp4]/best', '--no-mtime', '--embed-thumbnail', '--force-ipv4'] [debug] Custom config: [] [debug] Command-line args: ['-vU'] [debug] Encodings: locale UTF-8, fs utf-8, out utf-8, pref UTF-8 [debug] youtube-dl version 2025.07.12 [debug] Lazy loading extractors enabled [debug] Single file build [debug] Python 3.10.12 (CPython x86_64 64bit) - Linux-5.15.0-143-generic-x86_64-with-glibc2.35 - OpenSSL 3.0.2 15 Mar 2022 - glibc 2.35 [debug] exe versions: ffmpeg N-120171-g05094c1749-20250705, ffprobe N-120171-g05094c1749-20250705, rtmpdump 2.4 [debug] Proxy map: {} Latest version: 2025.07.12, Current version: 2025.07.12 youtube-dl is up to date (2025.07.12) Removing cache dir /home/nico/.cache/youtube-dl .. I also don't understand why @dirkf still hasn't updated the Installation section in the Readme. It's a complete mess. BTW, I've made a significant change to `./youtube_dl/utils.py`, as I suggested here. Youtube-dl actually works now.

There's something wrong with the latest (v2025.07.11) youtube-dl.exe build downloaded from GitHub: https://github.com/nicolaasjan/youtube-dl/releases/tag/2025.07.11 https://github.com/nicolaasjan/youtube-dl/releases/download/2025.07.11/youtube-dl.exe youtube-dl -vU => [debug] System config: [] [debug] User config: [] [debug] Custom config: [] [debug] Command-line args: ['-vU'] [debug] Encodings: locale cp1253, fs mbcs, out cp737, pref cp1253 [debug] youtube-dl version 2025.07.11 [debug] Lazy loading extractors enabled [debug] Single file build [debug] Python 3.4.4 (CPython x86 32bit) - Windows-Vista-6.0.6003-SP2 - OpenSSL 1.0.2d 9 Jul 2015 [debug] exe versions: none [debug] Proxy map: {} Traceback (most recent call last): File "C:\Users\nico\Desktop\youtube-dl_source\youtube_dl\update.py", line 48, in update_self File "c:\Program Files (x86)\Python3.4.4\lib\urllib\request.py", line 470, in open File "c:\Program Files (x86)\Python3.4.4\lib\urllib\request.py", line 580, in http_response File "c:\Program Files (x86)\Python3.4.4\lib\urllib\request.py", line 502, in error File "c:\Program Files (x86)\Python3.4.4\lib\urllib\request.py", line 442, in _call_chain File "c:\Program Files (x86)\Python3.4.4\lib\urllib\request.py", line 685, in http_error_302 File "c:\Program Files (x86)\Python3.4.4\lib\urllib\request.py", line 470, in open File "c:\Program Files (x86)\Python3.4.4\lib\urllib\request.py", line 580, in http_response File "c:\Program Files (x86)\Python3.4.4\lib\urllib\request.py", line 508, in error File "c:\Program Files (x86)\Python3.4.4\lib\urllib\request.py", line 442, in _call_chain File "c:\Program Files (x86)\Python3.4.4\lib\urllib\request.py", line 588, in http_error_default urllib.error.HTTPError: HTTP Error 404: Not Found ERROR: can't find the current version. Please try again later. The previous compile, of version 2025.06.26: https://github.com/nicolaasjan/youtube-dl/releases/download/2025.06.26/youtube-dl.exe , behaves as expected: youtube-dl -vU => [debug] System config: [] [debug] User config: [] [debug] Custom config: [] [debug] Command-line args: ['-vU'] [debug] Encodings: locale cp1253, fs mbcs, out cp737, pref cp1253 [debug] youtube-dl version 2025.06.26 [debug] Lazy loading extractors enabled [debug] Single file build [debug] Python 3.4.4 (CPython x86 32bit) - Windows-Vista-6.0.6003-SP2 - OpenSSL 1.0.2d 9 Jul 2015 [debug] exe versions: none [debug] Proxy map: {} youtube-dl is up to date (2025.06.26) Many thanks for your ongoing efforts towards maintaining support for "our" older OSes ...

Strange, but it appears that the issue has completely resolved itself.

That was clear, but from what they tell, looks like the patch is intended to be applied only to 138+. Who would write a patch for the old 132, while we are at 140+ already?

Folks, please use only English words (or say Dutch, German, French words, but only those that are currently/officially used in English) Like "grab" (Dutch word), for example. The ones that can be found in English vocabularies!

Done! https://msfn.org/board/topic/186225-change-a-letter-game-part-ii/?do=findComment&comment=1266415

And now, disable Circular Kernel Context Logger and Audio logger. Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger] "Status"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\Audio] "Start"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\Circular Kernel Context Logger] "Start"=dword:00000000

WMItracing.log OFF (Vista) Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI] "SessionEnabled"=dword:00000000 "Level"=dword:00000000

Thank you for the detailed explanation!

I fail to understand why do they all patch only the standard chrome, not ungoogled.