RamonUn Posted June 9, 2022 Posted June 9, 2022 (edited) It seems martok decided to finally include a broad UXP supportto palefill. I thought he had dropped the Idea after some discussions we had here: https://github.com/martok/palefill/issues/20 but after roytam1 proposed him to improve feature detection, he decided it was finally a viable option. So in the end the main palefill branch will work on almost all UXP platforms version 4.8.2and higher. There is still a problem for Serpent, because the required min version is 52.9.2020.10.05 and Serpent's is stuck to 52.9 Also Serpent 55 does not work because it uses UXP 4.0.2, and max version is set to 52.9.* instead of 55.* Maybe I will keep my fork, just for those two platforms, with the alternate install.rdf, or ask again martok, but I do not think it is possible for Serpent55 because it would make the install.rdf, far too forgiving. So for now I advise everyone to manually update to his version. Edit: actually it also fails installation with newmoon 28.10, so I guess I will ask to improve that Edited June 9, 2022 by RamonUn
RamonUn Posted June 9, 2022 Posted June 9, 2022 8 hours ago, UCyborg said: Better checks were added yesterday I see. Current SeaMonkey's (not UXP) platform version is 60 something, so version check also wouldn't give the desired result in that browser. You can make it more complicated (function supersededFixes) and a bit more correct (no assumptions). I already disabled version checking for feature detection last day and the 1.11 link was updated, however I now recommend the original version.
roytam1 Posted June 9, 2022 Author Posted June 9, 2022 8 hours ago, UCyborg said: Current SeaMonkey's (not UXP) platform version is 60 something there are 2 branches in development, 2.53 is more mature one: http://www.wg9s.com/comm-253/ while 2.57 is more unstable: http://www.wg9s.com/comm-257/ 2
UCyborg Posted June 9, 2022 Posted June 9, 2022 (edited) 2 hours ago, RamonUn said: Maybe I will keep my fork, just for those two platforms, with the alternate install.rdf, or ask again martok, but I do not think it is possible for Serpent55 because it would make the install.rdf, far too forgiving. Those min/max version checks are more about what is officially supported and tested. Last time I checked, it wasn't a big problem just to simply run it on Firefox 52.9, but it's not as useful in the current state since you'd also have to add stuff missing in that browser required for web sites. I'm keeping mine for myself since I bothered to look up how to get window object from bootstrapped extension. 2 hours ago, roytam1 said: there are 2 branches in development, 2.53 is more mature one: http://www.wg9s.com/comm-253/ while 2.57 is more unstable: http://www.wg9s.com/comm-257/ Indeed, I was referring to the stable one. I didn't know until rather recently that 2.57 exists for several years now (which I never tried). Reminds me of Process Hacker, though I didn't find instabilities with some newer builds of it, but then, there's a lot of things to miss if you're a simpler user. Or it just seems to works, there's a build of CyanogenMod 7.2 for Samsung Galaxy Mini that never left nightly status. Edited June 9, 2022 by UCyborg
VistaLover Posted June 9, 2022 Posted June 9, 2022 (edited) On 6/1/2022 at 12:44 PM, Egorkaru said: why the site with your browsers for Windows XP https://o.rthost.win does not open via HTTPS in the Google Chrome 49 browser under Windows XP SP3? I am getting error "ERR_SSL_VERSION_OR_CIPHER_MISMATCH". According to SSL Labs, Chrome 49 / XP SP3 supports the following protocols and cipher suites: https://www.ssllabs.com/ssltest/viewClient.html?name=Chrome&version=49&platform=XP SP3&key=136 Protocols TLS 1.3 No TLS 1.2 Yes TLS 1.1 Yes TLS 1.0 Yes Cipher Suites (in order of preference) TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) Forward Secrecy 128 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8) Forward Secrecy 256 OLD_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcc13) Forward Secrecy 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) WEAK 256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) WEAK 128 TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c) WEAK 128 TLS_RSA_WITH_AES_256_CBC_SHA (0x35) WEAK 256 TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) WEAK 128 TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) WEAK 112 I presume the above reflects XP SP3 fully updated until EoS, without any POSReady additional updates; NB that while Chrome 49 comes with its own TLS protocol support, it relies on the OS both for certificates (WinCert store) and supported cipher suites... For completeness, what additional (if any) cipher suites are added via the POSReady updates? To check, launch Ch49 (under XP SP3+POSReady) and visit https://clienttest.ssllabs.com:8443/ssltest/viewMyClient.html OTOH, the server "o.rthost.win" resolves into two IPv6 + two IPv4 addresses; e.g., "104.21.48.191" supports the following protocols and cipher suites: https://www.ssllabs.com/ssltest/analyze.html?d=o.rthost.win&s=104.21.48.191 Protocols TLS 1.3 Yes TLS 1.2 Yes TLS 1.1 Yes TLS 1.0 Yes This server supports TLS 1.0 and TLS 1.1. Grade capped to B. This site works only in browsers with SNI support. # TLS 1.3 (server has no preference) TLS_AES_128_GCM_SHA256 (0x1301) ECDH x25519 (eq. 3072 bits RSA) FS 128 TLS_AES_256_GCM_SHA384 (0x1302) ECDH x25519 (eq. 3072 bits RSA) FS 256 TLS_CHACHA20_POLY1305_SHA256 (0x1303) ECDH x25519 (eq. 3072 bits RSA) FS 256 # TLS 1.2 (suites in server-preferred order) TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) ECDH x25519 (eq. 3072 bits RSA) FS 128 OLD_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcc14) ECDH x25519 (eq. 3072 bits RSA) FS 256P TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca9) ECDH x25519 (eq. 3072 bits RSA) FS 256P TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009) ECDH x25519 (eq. 3072 bits RSA) FS WEAK 128 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xc02c) ECDH x25519 (eq. 3072 bits RSA) FS 256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) ECDH x25519 (eq. 3072 bits RSA) FS WEAK 256 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xc023) ECDH x25519 (eq. 3072 bits RSA) FS WEAK 128 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (0xc024) ECDH x25519 (eq. 3072 bits RSA) FS WEAK 256 # TLS 1.1 (suites in server-preferred order) TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009) ECDH x25519 (eq. 3072 bits RSA) FS WEAK 128 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) ECDH x25519 (eq. 3072 bits RSA) FS WEAK 256 # TLS 1.0 (suites in server-preferred order) TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009) ECDH x25519 (eq. 3072 bits RSA) FS WEAK 128 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) ECDH x25519 (eq. 3072 bits RSA) FS WEAK 256 As you can verify on closer inspection, there exist no common cipher suites between what the browser and the server support, so the OP is absolutely right; the same is indicated by SSL Labs Server Test: Quote Handshake Simulation Chrome 49 / XP SP3 Server sent fatal alert: handshake_failure Notice how the server is configured to only support cipher suites (TLS_ECDHE_ECDSA_*) with Perfect Forward Secrecy (PF), which, on the one hand, is a good thing, but it may limit the connection ability of older clients... @roytam1, do you have any control on this? If you could add (on the server) support for (even just one of) TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8) OLD_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcc13) which aren't deemed WEAK, Ch49/XP SP3 could connect over TLSv1.2... PS: For anyone vaguely interested, Chrome 49 / Vista SP2 (fully updated to EoS+TLSv1.2 support from WS2008SP2) can connect natively over TLSv1.2 via "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca9)" : Edited June 9, 2022 by VistaLover 2
VistaLover Posted June 9, 2022 Posted June 9, 2022 (edited) On 6/3/2022 at 7:33 PM, Slavich said: The browser throws an error for the VkOpt extension, which allows you to download music from a social network Vk.com . This extension for the Pale Moon browser gives an error in the New Moon browser. I don't have an account on vk.com myself, so can't even test this... VkOpt extension: Why couldn't you give a link to it? I suppose you refer to: https://vkopt.net/download/ => VkOpt для Firefox => Yстановить для PaleMoon which affords file: https://vkopt.net/upd/vkopt_v3.0.8_(210206)_palemoon.xpi This is a "JetPack SDK" type of "legacy" extension, dating back to Feb 6th 2021; your screenshot directs "devs" to https://vk.com/dev/constant_version_updates (and possibly also to https://vk.com/dev/versions ) It is my understanding VK updated things on "their side" and thus the extension no longer functions as expected; there's a slightly newer version of the extension on their GitHub repo, "vkopt_v3.0.8_.210307._palemoon.xpi", so you should give that one a chance, too (unless it's already in use; unfortunately, I'm not a clairvoyant ...). TL;DR: Most likely, your "issue" isn't browser (NM28) related, but rather "extension" related (broken by VK); in any case, you should somehow contact the extension authors and notify them of this breakage... EDIT: Related: https://github.com/VkOpt/VkOpt/commit/883dfea0903276c36993fa955a4b206fbfa0dd00#commitcomment-64516745 Edited June 9, 2022 by VistaLover
roytam1 Posted June 9, 2022 Author Posted June 9, 2022 1 hour ago, VistaLover said: do you have any control on this? If you could add (on the server) support for (even just one of) I don't have control because they're cloudflare's server. 2
VistaLover Posted June 10, 2022 Posted June 10, 2022 (edited) On 6/5/2022 at 8:15 AM, UCyborg said: On 6/5/2022 at 1:32 AM, Art7220 said: www.v1011fm.com thenew1079.iheart.com SyntaxError: invalid regexp group So, use different browser I guess... ... Recently, I have been toying with the idea of writing simple Violentmonkey userscripts to be used in latest Serpent 52.9.0 (and, possibly, 55.0.0) that fetch online polyfills for missing, native, Web APIs; the core-js bundle of polyfills does have ones for 'RegExp Named Captured Groups', so by the below VM userscript, // ==UserScript== // @name Add 'core-js-bundle' polyfills // @version 3.22.8 // @description Polyfills for ES3, ES5, ES6, ES7, ES2015, ES2016, ES2017, ES2018, ES2019, ES2020, ECMAScript3, ECMAScript5, ECMAScript6, ECMAScript7, ECMAScript2015 // @namespace core-js-bundle // @include https://*.iheart.com/* // @run-at document-start // @require https://cdn.jsdelivr.net/npm/core-js-bundle@3.22.8/minified.min.js // ==/UserScript== I was able to load OP's offending "iheart" URIs in St52: You can add additional URIs/domains that need this "treatment" via adding corresponding "// @include" lines... That web design is abysmal , probably coded by a 20yr old who's never accessed the web in a non-mobile device , but, what the heck... BTW, the "Listen Live" feature is geo-fenced (US IPs, only). Edited June 10, 2022 by VistaLover 1
NotHereToPlayGames Posted June 10, 2022 Posted June 10, 2022 9 hours ago, VistaLover said: Recently, I have been toying with the idea of writing simple Violentmonkey userscripts to be used in latest Serpent 52.9.0 (and, possibly, 55.0.0) that fetch online polyfills for missing, native, Web APIs; the core-js bundle of polyfills does have ones for 'RegExp Named Captured Groups', so by the below VM userscript, Can you explain further? I thought that the latest Serpent 52.9 already included the polyfill coalesc (?) and chaining (?) polyfills? Does this userscript add coalesc (?) and chaining (?) polyfills to NM28? To 360Chrome v11?
VistaLover Posted June 10, 2022 Posted June 10, 2022 20 minutes ago, NotHereToPlayGames said: Can you explain further? I thought that the latest Serpent 52.9 already included the polyfill coalesc (?) and chaining (?) polyfills? The "iheart" URls referenced by @Art7220 fail to load fully in latest UXP browsers not because the platform (UXP) lacks support for Optional Chaining ("?.") and Nullish Coalescing ("??") operators, but because of lack of support for ECMAScript2018 RegExp features (e.g. "Named Captured Groups"); this is being demonstrated by the WebConsole error @UCyborg already posted, that one gets by trying to load either of https://v1011sacramento.iheart.com https://thenew1079.iheart.com in latest NM28/St52 30 minutes ago, NotHereToPlayGames said: Does this userscript add coalesc (?) and chaining (?) polyfills to NM28? Latest NM28 DOES NOT need extra polyfills for ("?.") and ("??"), as they are supported natively... The "core-js" project I linked to contains a bucketload of recent JS polyfills, but I have not taken the time myself to properly index exactly what (and I wish JSDelivr provided an easy way to just fetch ONLY the core-js polyfills one needs, instead of the whole core-js-bundle, but I couldn't figure it out myself ) ... NB that VM is a WE, so not supported in NM28; your UserScript Manager choice there boils down to Greasemonkey for Pale Moon, currently an abandonware ... 42 minutes ago, NotHereToPlayGames said: To 360Chrome v11? 360EEv11 loads the "iHeart URIs" natively (which is yet another indication of how badly UXP fares in WebCompat ), so I had no need to use additional polyfills there for these... I suspect the real question is: "Can I use your userscript to "pay my water bills" in 360EEv11?" The answer is probably NOT (but you'd have to try it yourself...). 2
adata Posted June 10, 2022 Posted June 10, 2022 https://www.openstreetmap.org palemoon, basilisk, bnavigator - It is not possible to edit the map with the basic editor "Edit with iD (in-browser editor)" When trying to enter the editor as a logged-in user, the window turns white and the orthophotomap does not load. It was working a few days ago, they must have changed something in the site code. k-meleon - even the main basic map does not load, white page
Skorpios Posted June 10, 2022 Posted June 10, 2022 18 hours ago, VistaLover said: ... Recently, I have been toying with the idea of writing simple Violentmonkey userscripts to be used in latest Serpent 52.9.0 (and, possibly, 55.0.0) that fetch online polyfills for missing, native, Web APIs; the core-js bundle of polyfills does have ones for 'RegExp Named Captured Groups', so by the below VM userscript, // ==UserScript== // @name Add 'core-js-bundle' polyfills // @version 3.22.8 // @description Polyfills for ES3, ES5, ES6, ES7, ES2015, ES2016, ES2017, ES2018, ES2019, ES2020, ECMAScript3, ECMAScript5, ECMAScript6, ECMAScript7, ECMAScript2015 // @namespace core-js-bundle // @include https://*.iheart.com/* // @run-at document-start // @require https://cdn.jsdelivr.net/npm/core-js-bundle@3.22.8/minified.min.js // ==/UserScript== I was able to load OP's offending "iheart" URIs in St52: You can add additional URIs/domains that need this "treatment" via adding corresponding "// @include" lines... That web design is abysmal , probably coded by a 20yr old who's never accessed the web in a non-mobile device , but, what the heck... BTW, the "Listen Live" feature is geo-fenced (US IPs, only). I beg to differ... That site is working OK with AF360-13.5, the music is playing and the "Listen Live" podcasts are working. No VPN, swedish IP-address. As you wrote later v11 is loading the site but no music, no podcasts...
VistaLover Posted June 10, 2022 Posted June 10, 2022 3 hours ago, Skorpios said: the music is playing and the "Listen Live" podcasts are working. No VPN, swedish IP-address. I wrote: 21 hours ago, VistaLover said: BTW, the "Listen Live" feature is geo-fenced (US IPs, only). and by that I meant the ability to listen to the Live Audio Stream/Feed of, e.g., "Sacramento, CA. KISS 107.9" Radio Station, not the ability to Listen "Live" to Podcasts, which, by definition, are pre-recorded audio[-visual] media, aka AOD (Audio-On-Demand), and can't be "LIVE" ... If you do load "https://v1011sacramento.iheart.com" , the "Listen Live To Sacramento's Newest Station, KISS 107.9, Your Home For The Best Variety From The 90's & 2000's!" click area actually points to: "https://www.iheart.com/live/kiss-1079-9429/" On a non-US IP address, that link auto-redirects to: "https://www.iheart.com/podcast/" ... but with a sanctioned US IP address, "https://www.iheart.com/live/kiss-1079-9429/" loads a different page: ... from which, by clicking any of the PLAY buttons, you can listen to the station's LIVE AUDIO STREAM (it's actually a low quality, HE-AACv2 @48kbps encode...). 3 hours ago, Skorpios said: v11 is loading the site but no music, no podcasts... Issues specific to 360EE should be better placed in the dedicated threads; but just to humour you, I have no issue whatsoever loading and playing back "iHeart" Podcast pages in my copy of 360EEv11 (build 2251, Russian portable RePack): if it matters, Windows Vista SP2 32-bit ...
roytam1 Posted June 10, 2022 Author Posted June 10, 2022 New build of Serpent/UXP for XP! Test binary: Win32 https://o.rthost.win/basilisk/basilisk52-g4.8.win32-git-20220611-3219d2d-uxp-fec5435ab-xpmod.7z Win64 https://o.rthost.win/basilisk/basilisk52-g4.8.win64-git-20220611-3219d2d-uxp-fec5435ab-xpmod.7z source code that is comparable to my current working tree is available here: https://github.com/roytam1/UXP/commits/custom IA32 Win32 https://o.rthost.win/basilisk/basilisk52-g4.8.win32-git-20220611-3219d2d-uxp-fec5435ab-xpmod-ia32.7z source code that is comparable to my current working tree is available here: https://github.com/roytam1/UXP/commits/ia32 NM28XP build: Win32 https://o.rthost.win/palemoon/palemoon-28.10.6a1.win32-git-20220611-d849524bd-uxp-fec5435ab-xpmod.7z Win32 SSE https://o.rthost.win/palemoon/palemoon-28.10.6a1.win32-git-20220611-d849524bd-uxp-fec5435ab-xpmod-sse.7z Win64 https://o.rthost.win/palemoon/palemoon-28.10.6a1.win64-git-20220611-d849524bd-uxp-fec5435ab-xpmod.7z Official UXP changes picked since my last build: - Issue #1905 - Part 1 - Implement detection of Monterey (12.x), Intel emulation and fix required OS version check. (8cee7f2b1) - Issue #1905 - Part 2a - Build system fixes to allow use of SDK versioned 11.0 and higher. Also don't include code incompatible with SDK 10.15 and higher, when building with such a SDK. (45606ffa5) - Issue #1905 - Part 2b - Fix crash on startup due to inability to load system font with newer SDKs. Fix based on Mozilla Bug 1672842. (d18524ab7) - [MailNews] Allow shift-clicking on Edit As New to edit a message as plaintext. (6182744d9) - Revert "Issue #1909 - Guard against empty update manifest URL" (d8e6867da) No official Pale-Moon changes picked since my last build. No official Basilisk changes picked since my last build. My changes picked since my last build: - Revert "Issue #1909 - Guard against empty update manifest URL" (8c7e1338c) * Notice: From now on, UXP rev will point to `custom` branch of my UXP repo instead of MCP UXP repo, while "official UXP changes" shows only `tracking` branch changes. 3
roytam1 Posted June 10, 2022 Author Posted June 10, 2022 New build of BOC/UXP for XP! Test binary: MailNews Win32 https://o.rthost.win/boc-uxp/mailnews.win32-20220611-3dbfc66a-uxp-fec5435ab-xpmod.7z BNavigator Win32 https://o.rthost.win/boc-uxp/bnavigator.win32-20220611-3dbfc66a-uxp-fec5435ab-xpmod.7z source repo (excluding UXP): https://github.com/roytam1/boc-uxp/tree/custom * Notice: the profile prefix (i.e. parent folder names) are also changed since 2020-08-15 build, you may rename their names before using new binaries when updating from builds before 2020-08-15. -- New build of HBL-UXP for XP! Test binary: IceDove-UXP(mail) https://o.rthost.win/hbl-uxp/icedove.win32-20220611-id-181ea5d-uxp-fec5435ab-xpmod.7z IceApe-UXP(suite) https://o.rthost.win/hbl-uxp/iceape.win32-20220611-id-181ea5d-ia-c642e3c-uxp-fec5435ab-xpmod.7z source repo (excluding UXP): https://github.com/roytam1/icedove-uxp/tree/winbuild https://github.com/roytam1/iceape-uxp/tree/winbuild for UXP changes please see above. 1
Recommended Posts