Repository navigation
Safeer Browser for Linux 1.0.132 · Safeer OS 0.4.90 (with Safeer Control 2.1.87)
Security release: a hardened web engine, and always our own. Our WebKitGTK, JavaScriptCore and libsoup are now built with the same protections as the distribution packages, and stronger: stack protector, _FORTIFY_SOURCE=3, stack clash protection, Intel CET (IBT and shadow stack), full RELRO with immediate binding and a non-executable stack. Every build checks this for each library and helper process in the .deb and in both Flatpaks, and the build fails if a protection is missing. libxml2 2.15.4 and libxslt 1.1.45 are now built into the engine (checksums verified, their symbols hidden), so a system copy cannot replace them. An installed Safeer refuses to start if WebKit, JavaScriptCore or libsoup would be loaded from anywhere other than our own build.
No AppImage for now. The 1.0.131 AppImage carried the build system's WebKitGTK 2.52.6 and libsoup 3.4.4 instead of our engine. Until an AppImage can carry our engine and our libsoup fix, Safeer is available as .deb and Flatpak only, both with our engine. Existing AppImage users are pointed to the downloads page.
More stable. Programs you open from Safeer OS (menu, »Open with«, files) are no longer the first to be stopped when memory runs out. Helper processes (Safeer DRM, Spotify, screen sharing, conversions) are stopped together with everything they started, so nothing is left running. Closing follows a fixed order with a time limit for each step, and a damaged or unknown setting no longer stops the program: it falls back to the default, and settings are backed up before they are upgraded.
Privacy and developers. History, bookmarks and restored tabs never store a user name or password from an address, and a shortcut tile shows the real site. If a site has no working HTTPS, Safeer remembers this for 30 days and forgets it when you clear history or cookies. For web developers: an automation mode for WebDriver that never touches your profile and shows a visible banner.