Repository navigation
VAS 3.68.0 — Electron 版
本版主要更新:
🔒 安全性
- 修補圖片處理元件 sharp 內建 SVG 引擎的高風險漏洞(惡意 SVG 檔可觸發),以及 HEIC 解碼元件的兩個漏洞
- Electron 執行環境更新到 42.11.18,帶入 Chromium、Skia、V8 的安全修補
- 偽裝成 TIFF 的 SVG 檔、批次浮水印用的 SVG,不能再把電腦裡其他圖片畫進輸出
- SVG 隱私檢查補認 CSS 的外部匯入語法,並修正惡意 SVG 可讓 VAS 卡住的問題
- 暫存檔改放在 VAS 專屬資料夾、啟動時清掉上次殘留;呼叫系統指令改用更安全的方式
✨ 新功能與改進
- 自由像素圖可以開回 JSON 檔繼續畫:編輯面板的「匯入」鈕、把 .json 拖到工具列、選單列圖示「開啟像素 JSON…」三個入口都行;遇到付費版格式的檔案會清楚說明
- 像素色票右上角可刪除沒用到的顏色(可復原);按住 ⇧ 點格子可逐格加選/減選
- 延遲的視窗截圖改用 macOS 內建的點選視窗:倒數結束後游標變成相機,點哪扇窗就截哪扇
- 文字辨識/隱私遮蔽第一次執行需要等待時,會顯示進度
- 選單列圖示依狀態調整選項;編輯器被其他視窗蓋住時,點圖示就能叫回最前面
- 一次拖多個檔案到工具列時,會告訴你只開了第一個
- 隱私遮蔽多認得美國、英國的個資格式(SSN、EIN、NI 號碼、NHS 號碼、郵遞區號、sort code)
- 編輯器放大鏡的讀數依工具顯示:滴管給色碼與 RGB、尺標給座標
- 自由像素圖存 JSON 改從「存檔」視窗選 JSON 格式(面板上的存檔鈕移除)
🐛 修正
- 開著編輯器時接上外接螢幕,編輯器不再消失
- 編輯器開著時按截圖快捷鍵,不再多開一個編輯器,而是把現有的叫到前面
- 延遲的視窗截圖不再無限讀秒
- macOS 27 上「中文標籤+冒號+英數值」那一行(例如「密碼:」「電子郵件:」)不再被讀成亂碼,隱私遮蔽也不再因此漏遮
- 文字辨識逾時放寬,大圖不再中途放棄
- 隱私遮蔽等待中連按,不再重複掃描、疊兩層遮罩
- 切到選取工具或點已選中的物件時,屬性面板不再空白
- 改填色後一次 ⌘Z 就能復原;新放的文字不再沿用上一個的設定
- 工具列較長的提示會換行顯示,不再被截斷
- 開圖失敗時會提示原因,不再是一片黑
- 焦點在下拉選單上按方向鍵,不再把選中的標註推走
What's new in this release:
🔒 Security
- Patched a high-severity vulnerability in the SVG engine bundled with sharp, VAS's image-processing library (exploitable through a malicious SVG file), plus two vulnerabilities in its HEIC decoder
- Updated the Electron runtime to 42.11.18, bringing in security fixes from Chromium, Skia and V8
- SVG files disguised as TIFF, and SVGs used as batch watermarks, can no longer pull other images from your Mac into the output
- The SVG privacy check now also catches CSS import rules, and a malicious SVG can no longer make VAS hang
- Temporary files now live in a VAS-only folder and leftovers are cleaned up at launch; system commands are now invoked in a safer way
✨ New features & improvements
- Free-form pixel art can be reopened from its JSON file to keep drawing — via the Import button in the editor panel, by dragging the .json onto the toolbar, or from the menu bar icon ("Open Pixel JSON…"); files in the paid edition's format get a clear explanation
- Unused colours can be removed from the pixel palette with the ✕ in each swatch's corner (undoable); hold ⇧ and click cells to add or remove them from a selection one by one
- Delayed window capture now uses macOS's built-in window picker: when the countdown ends, the cursor turns into a camera — click any window to capture it
- Text recognition and Privacy Mask now show progress when the first run needs a moment
- The menu bar icon adapts its options to what you're doing; clicking it brings the editor back to the front when another window covers it
- Dropping several files onto the toolbar now tells you that only the first one was opened
- Privacy Mask recognizes more US and UK personal data formats (SSN, EIN, NI number, NHS number, postcode, sort code)
- The editor magnifier's readout follows the tool: colour code and RGB for the eyedropper, coordinates for the ruler
- Pixel art is now saved as JSON from the Save dialog by choosing the JSON format (the Save button in the panel has been removed)
🐛 Fixes
- Connecting an external display while the editor is open no longer makes the editor disappear
- Pressing a capture shortcut while the editor is open now brings the existing editor to the front instead of opening a second one
- Delayed window capture no longer counts down forever
- On macOS 27, lines with a Chinese label, a colon and a Latin value (e.g. "密碼:", "電子郵件:") are no longer misread, so Privacy Mask no longer misses them
- Text recognition allows more time, so large images are no longer abandoned halfway
- Clicking Privacy Mask repeatedly while it's working no longer scans twice or stacks two masks
- The properties panel is no longer empty when switching to the Select tool or clicking an already-selected object
- Changing a fill colour can be undone with a single ⌘Z; new text no longer inherits the previous text's settings
- Longer toolbar messages now wrap instead of being cut off
- When an image fails to open, VAS now tells you why instead of showing a black canvas
- Pressing the arrow keys while a dropdown has focus no longer nudges the selected annotation