SeaMonkey 2.49.4

# Fixes
* Applications could not be removed from the "Application details" dialog under Preferences, Helper Applications.
* View / Message Body As could show menu items out of context.

286718 mailnews spell check - [Enter] no longer chooses 'replace' although 'replace' is 'active' button.
313918 IME candidate list is positioned to wrong position if the caret is positioned non-root view
315457 IME candidate list is positioned to wrong position if the editor is on frame page
369388 Profile Manager has a "Start Mozilla" button
369392 Composer declares wrong encoding
369814 jar: protocol is an XSS hazard due to ignoring mime type and being considered same-origin with hosting site
389136 XML errors when application chrome.rdf exists but is read-only
390282 xul labels should be cropped with unicode ellipsis (u2026) instead of three dots
391028 drawImage with broken PNG draws random memory
393326 [FIX]Crash [@ nsCSSFrameConstructor::RemoveFirstLetterFrames] with quotes, binding, position: fixed, display: -moz-box and first-letter
394713 SeaMonkey 1.1.4 takes much longer to start without administrator privileges than with
394859 Gecko lost its connection with X server
398537 aPNG images in css cursor rule leak a lot of memory
398837 [FIX]Keyboard accelerators missing on Security Warning dialog
400082 [10.5] Unable to access dropdown list on this site, works on Tiger
400165 Firefox 2 will not compile on Mac OS X 10.5 in common configurations
400372 New composer window isn't unmodified
400463 firefox-2.0.0.8 build break due to relocation error on amd64 - missing system header
401768 [10.5] Can't build with gcc 3.3 and an SDK on Leopard
401947 MailNews view-source window lacks status bar
402460 CreateUnique is very slow and returns bogus error for write-protected directory
402649 [FIX]window.location race condition can be used to spoof referer header
403331 Sort out jar: behavior on HTTP redirects
403406 Cursor does not always change to appropriate pointer after using scroll buttons/slider.
403989 Cannot save images with SeaMonkey any more
405584 Canvas.drawImage method is not working

388121 about:blank loaded by chrome in particular ways has chrome privileges
389106 we may not escape quotes everywhere
389580 some schemes with %00 launch unexpected handlers on windows
389257 Cross-application scripting vulnerability in SeaMonkey
166254 Received date field
178993 MSIE-extension: HttpOnly cookie attribute for cross-site scripting vulnerability prevention
206679 junk Mail filtered from an IMAP to Local or pop folder does not get analyzed when that folder is opened
310264 unable to print forwarded mail (message/rfc822)
312473 extension update does not try authentication if needed (e.g. proxy auth at startup)
319934 Crash on quit just as an nsXMLHttpRequest is fired [@ nsContentUtils::GetDocShellFromCaller]
322436 WARNING: nsBlockFrame::CheckFloats: Explicit float list is out of sync with float cache
342857 Add support for XPath function 'current()'
351943 Browser crashes when trying to allocate large image
352998 Mail never deleted from pop server(due to fail to keep consistency of popstate.dat when connection loss); Then eventually Server fills after months and email rejected
359821 Firefox just crashes after about 10 minutes of use [@ nsHTMLDocument::GetElementById]
363592 GCC build errors in nsImageWin.h and nsImageWin.cpp
364461 [FIX]Pagehide not always dispatched in subframes
366417 Adding to XUL document no longer executes the script
368317 temp files remain if MoveToNative fails in nsSafeFileOutputStream::Finish()
368583 Support XForms 1.1 insert action
371858 [FIX]Pushing null JSContext on the stack doesn't prevent bogus subject principals
373404 improve palmsync error checking and logging, and feedback to the hotsync manager
375102 fix RDFXMLDataSourceImpl::rdfXMLFlush() to use safe output streams like nsBookmarksService::WriteBookmarks() to avoid writing a partial localstore.rdf to disk
376173 ProfileManager comes up as XUL error dialog
377090 Introduce API to null out and restore cx->fp on a JSContext
378629 SSL file uploads settle into oscillating pattern with very small packets
378807 Automatically delete settings are not properly disabled in Junk Settings
379550 Proposing threading safety patch for stable branch(es)
380017 MPL compliance: *ongoing* Intial Developers credits
380558 Some event waiting in PSM make the CPU wake from idle with no reason
380998 StackGrowthDirection is not reliable with Sun Studio 11
381114 Crash [@ msaa/nsAccessibleWrap::NativeAccessible ]
381276 Allow "moves" as copies for cards to mailing lists
381300 Frame spoofing is possible within a short time frame while the window is loading.
382015 Handle old/new API behavior of cairo_{fill,stroke}_extent on branch
382686 [mz2] iframes from other sites can be changed while pointing at about:blank
382686 [mz2] iframes from other sites can be changed while pointing at about:blank"bug_id,"short_desc
383065 Back-port several nsWindow fixes to branch
383181 Prevent creating/overwriting HttpOnly cookies from web content
383406 Firefox crashed when add bookmark with Orca running [@nsXULSelectableAccessible::RefSelection]
383478 File type confusion vulnerability due to null bytes in URL (encoded as %00)
385806 SOAPAction Header on submission is not being set
385857 multipart/form-data submission broken on 0.8
385880 [FIX]"ASSERTION: Non-row-group primary frame list child of an nsTableFrame?" with
386070 http referer field not set for submission
386365 Change version number to 0.8.0.2
387543 web content can set httponly cookie by overwriting a non-httponly one
387738 Using repeat index for 1.1 delete does not work
388583 Autocomplete dropdown doesn't update when scrolling with scrollbar

Security and stability fixes

166254 Received date field
178993 MSIE-extension: HttpOnly cookie attribute for cross-site scripting vulnerability prevention
206679 junk Mail filtered from an IMAP to Local or pop folder does not get analyzed when that folder is opened
310264 unable to print forwarded mail (message/rfc822)
312473 extension update does not try authentication if needed (e.g. proxy auth at startup)
319934 Crash on quit just as an nsXMLHttpRequest is fired [@ nsContentUtils::GetDocShellFromCaller]
322436 WARNING: nsBlockFrame::CheckFloats: Explicit float list is out of sync with float cache
342857 Add support for XPath function 'current()'
351943 Browser crashes when trying to allocate large image
352998 Mail never deleted from pop server(due to fail to keep consistency of popstate.dat when connection loss); Then eventually Server fills after months and email rejected
359821 Firefox just crashes after about 10 minutes of use [@ nsHTMLDocument::GetElementById]
363592 GCC build errors in nsImageWin.h and nsImageWin.cpp
364461 [FIX]Pagehide not always dispatched in subframes
366417 Adding to XUL document no longer executes the script
368317 temp files remain if MoveToNative fails in nsSafeFileOutputStream::Finish()
368583 Support XForms 1.1 insert action
371858 [FIX]Pushing null JSContext on the stack doesn't prevent bogus subject principals
373404 improve palmsync error checking and logging, and feedback to the hotsync manager
375102 fix RDFXMLDataSourceImpl::rdfXMLFlush() to use safe output streams like nsBookmarksService::WriteBookmarks() to avoid writing a partial localstore.rdf to disk
376173 ProfileManager comes up as XUL error dialog
377090 Introduce API to null out and restore cx->fp on a JSContext
378629 SSL file uploads settle into oscillating pattern with very small packets
378807 Automatically delete settings are not properly disabled in Junk Settings
379550 Proposing threading safety patch for stable branch(es)
380017 MPL compliance: *ongoing* Intial Developers credits
380558 Some event waiting in PSM make the CPU wake from idle with no reason
380998 StackGrowthDirection is not reliable with Sun Studio 11
381114 Crash [@ msaa/nsAccessibleWrap::NativeAccessible ]
381276 Allow "moves" as copies for cards to mailing lists
381300 Frame spoofing is possible within a short time frame while the window is loading.
382015 Handle old/new API behavior of cairo_{fill,stroke}_extent on branch
382686 [mz2] iframes from other sites can be changed while pointing at about:blank
382686 [mz2] iframes from other sites can be changed while pointing at about:blank"bug_id,"short_desc
383065 Back-port several nsWindow fixes to branch
383181 Prevent creating/overwriting HttpOnly cookies from web content
383406 Firefox crashed when add bookmark with Orca running [@nsXULSelectableAccessible::RefSelection]
383478 File type confusion vulnerability due to null bytes in URL (encoded as %00)
385806 SOAPAction Header on submission is not being set
385857 multipart/form-data submission broken on 0.8
385880 [FIX]"ASSERTION: Non-row-group primary frame list child of an nsTableFrame?" with
386070 http referer field not set for submission
386365 Change version number to 0.8.0.2
387543 web content can set httponly cookie by overwriting a non-httponly one
387738 Using repeat index for 1.1 delete does not work
388583 Autocomplete dropdown doesn't update when scrolling with scrollbar

343999 window.home() incorrectly handles multiple home pages specified with |
372285 Additional problems in Firefox 2.0 SVG "_cairo_pen_init"
374039 Some dates not displayed when LC_TIME=hi_IN.UTF-8
183722 missing hotsync log entry on both PC and Palm to indicate Mozilla Address Book Sync
299054 Mozilla Plug-In API Proposal: Plugin able to Read Response Headers
309442 Support SOAPAction header on submission
332083 expose interface xforms:select to control selection
339286 [ally] tab navigation
340088 provide accessible label for xul
340995 complexType without complexContent fails validation
347327 Implement mediatype support for output
347563 implement xforms:upload for xul context
348053 implement accessible objects for xforms select controls
349644 implement accessible objects for xforms date input controls
350018 nsIFrame code returns coordinates with (0, 0) in bottom-left on mac
350067 invalid error message using inline schemas: Ignoring dup schema
350886 JavaXPCOM Unit Test
350928 Trunk and FF 2.0 prefs off with XForms
351067 fire event for xforms:range when value is changed and turn it into accessibility event
353677 serialization using method="multipart-post" doesn't serialize parts
353716 crash on quit [@ nsMacEventHandler::HandleMouseMoveEvent] or [@ nsMacEventHandler::ConvertOSEventToMouseEvent]
353880 Enhancements to spinbuttons and non-numeric range control types
356190 Controls should not be allowed to bind to complexContent
356498 [ally] arrow/pgUP/pgDown keys behavior for range
357569 relative binding expressions in repeats have problems
357652 xf:textarea appears to have a 4096 characters size restriction
357716 Crash in model/schema loader when main page fails to load
357901 submission 'post' to file doesn't work
358712 reorganize full selects
358930 Firefox 2.0 doesn't respect SVG gradient spreadMethod="pad"
360188 select1 keyboard navigation problems
360974 xsi:type value with no prefix handled incorrectly
361094 copyItem doesn't generate xforms-value-changed
361366 problems with xf:repeat in anonymous content
361501 use 'anonid' attribute inside anonymous content as ID attribute
361814 NS_ERROR_DOM_WRONG_DOCUMENT_ERR in select1.xml
361997 Keyboard navigation problems with date picker
362308 repeat doesn't update on value changes
362310 reset has stopped working
363516 inline message regression
365907 use spin controls for xul calendar
366743 range regression, no thumb showing
366844 [configure] visibility pragma support broken
366878 getting submission error using JS + xf:send
366975 js_NewGCThing asserts !flbase[flindex] because it assumes GC stays locked across last-ditch GC
367256 Expose datatype object attribute
367719 xf:input for xul can't be readonly
367792 Crash when running Java unit tests that call initXPCOM
368248 regression: getting binding exceptions with repeats
368627 Problem with XForms using itemsets across models
369150 Crash [@ nsHTMLFramesetFrame::GetNoResize] with dynamic changes
369410 Provide API for wrapping XPCOM and Java objects
369805 "Assertion failure: cx->lockedSealedScope != newscope" in jslock.c on startup
370092 Focus change between onKeyDown and onKeyPress, allowing to read arbitary files using (Zalewski Firefox focus stealing vulnerability)
370101 getfunns does not call SAVE_SP_AND_PC
370243 XULRunner dmg no longer contains installer
370360 Heap corruption in nsTableRowGroupFrame::CalculateRowHeights
370551 Support dateTime types for Range
371200 Every nsXULTooltipListener listens for pref change to update a global variable.
371285 Crash loading form with select inside repeat
371375 [FIX]Websites can test for URLs visited (pdp Firefox Cache Hack - Firefox History Hack redux)
371607 XUL's minimal submit styles are missed
371672 assert in morkConfig, invalid mork db
371828 Need to generate events for modifier key events (Cocoa widgets)
372237 Crash [@ GetChildListNameFor] with -moz-box, float, position: fixed, block-in-inline
372736 Support Date and Time types for Range
372737 Support gregorian calendar types for Range
372739 Support duration types for Range
372878 reduce the number of AC_TRY_RUN tests in configure.in
373061 complexType with optional complex content fails
373228 Cookie injection problems
373955 [FIX]/etc/mailcap takes precedence on GNOME mime preferences
373973 Security vulnerability in APOP authentication
374274 upload control in xul doesn't appear
374570 Limit content-generated popups to content area
374994 Actions inside itemsets behave incorrectly
375183 __noSuchMethod__ allocates beyond fp->script->depth
375196 crashes [@ nsVoidArray::RemoveElementsAt][@ nsTextControlFrame::FireOnInput]
375320 XForms leaks
375546 nsXFormsModelElement::ValidateNode() wrongly assumes simple type
375754 regression: submission replace instance with method=post broken
375983 xsi:type not on root element is ignored
375986 Add support for schema validation of mixed content models
376217 output with value doesn't find context
376371 [1.1] Add support for resource element on submission to allow more flexibility
376385 nsSchemaValidator::Validate() wrongly fails due to xsi:type resolution
376386 change version number to 0.8
376509 Leak of nested
376931 output mediatype patch won't work on branches
376958 dropmarker for xul datepicker won't work on branches
376989 xul select1 + output testcase fails on updated branch
377216 [FIX]Possible to reflow while quote/counter lists are dirty
377298 [1.1] Add @validate on submission element
377603 [FIX]Inner tables should not get parent style based on outer table pseudo
377702 Range: xsd:time/dateTime - incorrect seconds range
377824 [FIX]mtable causes "ASSERTION: Should have dealt with kids that have NS_FRAME_IS_SPECIAL elsewhere"
377867 Range with no end attribute results in unusable control
377874 repeat-attrs on table causing complex content binding error
377878 Wrong ordering of dispatched events
377880 message level="ephemeral" not working on branch
377888 Add support for submission @standalone attr for serialization
377896 StartNonListXMLMethod should contain return NULL, not return JS_FALSE
377962 Range: bound value should not change unless the user changes it
378273 Crash [@ nsViewManager::AddCoveringWidgetsToOpaqueRegion]
378551 origo sample table layout not working
378702 fix deferred events
378762 Add echo-variable-% for client.mk vars
378795 nsEditorSpellCheck is not automatically picking and setting a dictionary when spellchecker.dictionary is empty
378824 regression for index() on branches
379508 regression: choices in select causes selection to scroll out of view
379722 Starting Firefox or Thunderbird 2.0.0.4 prints "Handling command line!"

- The URL bar color now indicates SSL security status on Mac OS (previously, the feature was present only in the Windows and Linux versions). Bug 335113
- MAPI is fixed. As a result, File->Send->To mail as attachment... should now work properly in MS Office products. Bug 361233
- Some QuickLaunch issues have been resolved. Bug 368418 (possibly also Bug 368421 and Bug 367756).
- The tab-preview tooltips no longer show a preview for the active tab (part of Bug 368046)

Various security and stability fixes
- MFSA 2006-75 RSS Feed-preview referrer leak
- MFSA 2006-74 Mail header processing heap overflows
- MFSA 2006-73 Mozilla SVG Processing Remote Code Execution
- MFSA 2006-72 XSS by setting img.src to javascript: URI
- MFSA 2006-71 LiveConnect crash finalizing JS objects
- MFSA 2006-70 Privilege escallation using watch point
- MFSA 2006-69 CSS cursor image buffer overflow (Windows only)
- MFSA 2006-68 Crashes with evidence of memory corruption (rv:1.8.0.9/1.8.1.1)

General
- ChatZilla has been updated to a newer version (Bug 324439)
- [Mac] Menus and menu popups use more native styling (Bug 301105)
- [Linux] When launching SeaMonkey, already-running instances are detected (Bug 122698)

Browser
- A warning page is now shown before displaying about:config (Bug 339720)
- When you visit a secure site, the URL bar changes color to turns make security status more visible (Bug 335113)
- When using keyword URLs, it is no longer necessary to type "keyword:" (typing "keyword:" will no longer work). Just type the keyword name (Bug 337339)
- You can now drop URLs and bookmarks between existing tabs, which will result in a new tab being created where you dropped the URL (Bug 324591)
- When hovering on a tab, the tooltip now displays a preview of the tab's contents (Bug 315207)
- The search sidebar now behaves better (Bug 252802)
- The bookmarks menu and personal toolbar folder overflow menu now have context menus (Bug 50504)

Mail & Newsgroups
- Message labeling has been superseded by tagging, which provides much more than the original 5 labels and comes with new preferences (Bug 342560 and others)
- The preferences for junk mail have been modified to accommodate behavior changes (Bug 335846)
- Improved phishing detection (Bug 326082 and others)
- [Linux, Mac] New mail notification has been improved (Bug 327613, 305384, and others)