Skip to content

VAS 3.68.0 — Electron 版

Choose a tag to compare

@TB1982 TB1982 released this 23 Oct 07:39
· 12 commits to main since this release
7ad8cfb

本版主要更新:

🔒 安全性

  • 修補圖片處理元件 sharp 內建 SVG 引擎的高風險漏洞(惡意 SVG 檔可觸發),以及 HEIC 解碼元件的兩個漏洞
  • Electron 執行環境更新到 42.11.18,帶入 Chromium、Skia、V8 的安全修補
  • 偽裝成 TIFF 的 SVG 檔、批次浮水印用的 SVG,不能再把電腦裡其他圖片畫進輸出
  • SVG 隱私檢查補認 CSS 的外部匯入語法,並修正惡意 SVG 可讓 VAS 卡住的問題
  • 暫存檔改放在 VAS 專屬資料夾、啟動時清掉上次殘留;呼叫系統指令改用更安全的方式

✨ 新功能與改進

  • 自由像素圖可以開回 JSON 檔繼續畫:編輯面板的「匯入」鈕、把 .json 拖到工具列、選單列圖示「開啟像素 JSON…」三個入口都行;遇到付費版格式的檔案會清楚說明
  • 像素色票右上角可刪除沒用到的顏色(可復原);按住 ⇧ 點格子可逐格加選/減選
  • 延遲的視窗截圖改用 macOS 內建的點選視窗:倒數結束後游標變成相機,點哪扇窗就截哪扇
  • 文字辨識/隱私遮蔽第一次執行需要等待時,會顯示進度
  • 選單列圖示依狀態調整選項;編輯器被其他視窗蓋住時,點圖示就能叫回最前面
  • 一次拖多個檔案到工具列時,會告訴你只開了第一個
  • 隱私遮蔽多認得美國、英國的個資格式(SSN、EIN、NI 號碼、NHS 號碼、郵遞區號、sort code)
  • 編輯器放大鏡的讀數依工具顯示:滴管給色碼與 RGB、尺標給座標
  • 自由像素圖存 JSON 改從「存檔」視窗選 JSON 格式(面板上的存檔鈕移除)

🐛 修正

  • 開著編輯器時接上外接螢幕,編輯器不再消失
  • 編輯器開著時按截圖快捷鍵,不再多開一個編輯器,而是把現有的叫到前面
  • 延遲的視窗截圖不再無限讀秒
  • macOS 27 上「中文標籤+冒號+英數值」那一行(例如「密碼:」「電子郵件:」)不再被讀成亂碼,隱私遮蔽也不再因此漏遮
  • 文字辨識逾時放寬,大圖不再中途放棄
  • 隱私遮蔽等待中連按,不再重複掃描、疊兩層遮罩
  • 切到選取工具或點已選中的物件時,屬性面板不再空白
  • 改填色後一次 ⌘Z 就能復原;新放的文字不再沿用上一個的設定
  • 工具列較長的提示會換行顯示,不再被截斷
  • 開圖失敗時會提示原因,不再是一片黑
  • 焦點在下拉選單上按方向鍵,不再把選中的標註推走

What's new in this release:

🔒 Security

  • Patched a high-severity vulnerability in the SVG engine bundled with sharp, VAS's image-processing library (exploitable through a malicious SVG file), plus two vulnerabilities in its HEIC decoder
  • Updated the Electron runtime to 42.11.18, bringing in security fixes from Chromium, Skia and V8
  • SVG files disguised as TIFF, and SVGs used as batch watermarks, can no longer pull other images from your Mac into the output
  • The SVG privacy check now also catches CSS import rules, and a malicious SVG can no longer make VAS hang
  • Temporary files now live in a VAS-only folder and leftovers are cleaned up at launch; system commands are now invoked in a safer way

✨ New features & improvements

  • Free-form pixel art can be reopened from its JSON file to keep drawing — via the Import button in the editor panel, by dragging the .json onto the toolbar, or from the menu bar icon ("Open Pixel JSON…"); files in the paid edition's format get a clear explanation
  • Unused colours can be removed from the pixel palette with the ✕ in each swatch's corner (undoable); hold ⇧ and click cells to add or remove them from a selection one by one
  • Delayed window capture now uses macOS's built-in window picker: when the countdown ends, the cursor turns into a camera — click any window to capture it
  • Text recognition and Privacy Mask now show progress when the first run needs a moment
  • The menu bar icon adapts its options to what you're doing; clicking it brings the editor back to the front when another window covers it
  • Dropping several files onto the toolbar now tells you that only the first one was opened
  • Privacy Mask recognizes more US and UK personal data formats (SSN, EIN, NI number, NHS number, postcode, sort code)
  • The editor magnifier's readout follows the tool: colour code and RGB for the eyedropper, coordinates for the ruler
  • Pixel art is now saved as JSON from the Save dialog by choosing the JSON format (the Save button in the panel has been removed)

🐛 Fixes

  • Connecting an external display while the editor is open no longer makes the editor disappear
  • Pressing a capture shortcut while the editor is open now brings the existing editor to the front instead of opening a second one
  • Delayed window capture no longer counts down forever
  • On macOS 27, lines with a Chinese label, a colon and a Latin value (e.g. "密碼:", "電子郵件:") are no longer misread, so Privacy Mask no longer misses them
  • Text recognition allows more time, so large images are no longer abandoned halfway
  • Clicking Privacy Mask repeatedly while it's working no longer scans twice or stacks two masks
  • The properties panel is no longer empty when switching to the Select tool or clicking an already-selected object
  • Changing a fill colour can be undone with a single ⌘Z; new text no longer inherits the previous text's settings
  • Longer toolbar messages now wrap instead of being cut off
  • When an image fails to open, VAS now tells you why instead of showing a black canvas
  • Pressing the arrow keys while a dropdown has focus no longer nudges the selected annotation