{"id":144,"date":"2026-09-25T10:13:05","date_gmt":"2026-09-25T02:13:05","guid":{"rendered":"http:\/\/down.cdhaha.net\/?p=144"},"modified":"2026-09-25T10:08:57","modified_gmt":"2026-09-25T02:08:57","slug":"basilisk","status":"publish","type":"post","link":"http:\/\/down.cdhaha.net\/?p=144","title":{"rendered":"Basilisk 2026.09.24"},"content":{"rendered":"

\"Basilisk\"<\/a>Basilisk is a free and Open Source XUL-based web browser, featuring the well-known Firefox-style interface and operation. It is based on the Goanna layout and rendering engine (a fork of Gecko) and builds on the Unified XUL Platform (UXP), which in turn is a fork of the Mozilla code base without Servo or Rust.<\/p>\n

Basilisk as an application is primarily a vessel for development of the XUL platform it builds upon, and additionally a potential replacement for Firefox to retain the use of Firefox Extensions.<\/p>\n

Basilisk is development software. This means that it should be considered more or less “beta” at all times; it may have some bugs and is provided as-is, with potential defects. Like any other Free Software community project, it comes without any warranty or promise of fitness for any particular purpose. That being said: of course we will do our best to provide an as stable and secure browser as possible with every official release of Basilisk.
\n<\/p>\n

It should be noted that because of this focus on platform development, the browser itself (the application code) will be released and maintained mostly as-it-is, with very little change or development on the user interface or browser front-end features.<\/p>\n

Basilisk is a modern, full-featured web browser and as such requires a reasonably modern system to properly run.
\nWindows requirements<\/p>\n

Windows 7 or later. Windows XP or Windows Vista are not supported.
\n 1GB of RAM (2GB or more recommended for heavy use).
\n Dedicated GPU strongly recommended.
\n A modern processor (must have SSE2 support as the absolute minimum)<\/p>\n

Important differences with Mozilla Firefox:<\/p>\n

Uses Goanna as a layout and rendering engine. Goanna behaves slightly differently than Gecko in certain respects and may result in different display of web pages. e.g.: Goanna renders gradients in a more accurate color space (non-premultiplied).
\n Builds on UXP, our XUL platform in development. As such XUL is alive and well in this browser and will not be deprecated.
\n Has some long-standing known issues with the Mozilla code-base fixed (e.g. CVE-2009-1232).
\n Does not use Rust or the Photon user interface. You can expect a familiar interface as-carried by Firefox between v29 and v56.
\n Does not use Electrolysis (e10s, multi-process browsing).
\n Does not require walled-garden extension signing.<\/p>\n

These release notes are summaries of the most important changes for public releases.<\/p>\n

v2026.09.24
\nPublished 2026-09-24<\/p>\n

UXP Changes:
\n Implemented the URL.Parse() convenience function.
\n Added multiple bounds checks on internal browser functions to avoid potential out-of-bounds accesses, underflows and overflows. (DiD)
\n Fixed several issues with loading and parsing content-supplied fonts.
\n Set a bottom limit on the frequency for audio samples to avoid a whole class of potential bugs surrounding audio loading, processing and playback.
\n Audio formats with a sample rate below 8kHz (the commonly accepted lowest sample rate of “telephone”\/”walkie-talkie” quality) are now rejected.
\n Fixed a potential issue in CSS rounded corners with dotted styling.
\n Image elements in forms are no longer associated if they are not in the same subtree.
\n Made image animation checks more strict to avoid potential issues if decoding would be slow.
\n Video region checks are now more strict to avoid issues with malformed video files.
\n Implemented the CSS revert-layer keyword.
\n Implemented CSSStyleSheet replaceSync.
\n Implemented the CSS :has() pseudo class.
\n Implemented support for adoptedStyleSheets.
\n Firefox compatibility mode had its version updated to 140 by default. Of course this can still easily be overridden (globally or per-site) where necessary.
\n JavaScript garbage collection and DOM cycle collection have been given a number of important fixes to better deal with heavy modern websites that would not properly release their resources. The “ghostbuster” workaround for lingering window objects has been removed in tandem as it is no longer necessary.
\n Removed old and obsolete code from the platform related to ancient or completely unsupported compile targets.
\n The uppercase version of \u00df (eszett\/scharfes S) will now always mirror the lowercase writing method. See implementation notes.
\n Added more updates for LoongArch64 (including full JIT) and Mac\/PPC support.
\n Linux\/FreeBSD: Added a GTK2 dependency toggle to build NPAPI support without GTK2. This allows Basilisk to build plugin support on systems with no GTK2 packages.
\n Removed the unused “network tickler” module, an inherited component that could ping wireless networks on a regular interval.
\n Modernized std::*::value\/::type to their _v and _t suffix forms, respectively, aligning with more modern C++ language standards and compiler behavior.
\n Updated CSS aspect-ratio to be more spec-compliant.
\n Updated flex container buttons to report a definite size (avoiding 0-sized elements on some websites).
\n Restored the ability to compile Basilisk on MIPS targets.
\n Fixed an issue with possible hangs in recursive restyling calls (causing a recursive reflow storm), avoiding potentially long browser hangs\/lockups.
\n Updated several parts of the ICU code for better internationalization support.
\n Linux: Improved typing performance on some complex pages.
\n Partial support for ARM64\/aarch64 JIT. ARM64 builds will run substantially as of this release.
\n Fixed potential undefined behavior in float to int32 conversions.
\n Made checking for structural errors in XML-based files more strict.
\n Fixed a crash in the WeakRef implementation.
\n Fixed a potential issue in UI tooltips (DiD).
\n Fixed a regression in XSLT transformations that would result in incorrect output.
\n Updated the internal json viewer for better handling of resources.
\n Updated NSS to 3.90.14.0 (UXP) addressing all applicable security issues from NSS upstream.
\n Another large security audit of over 200 sec bugs in Mozilla land has been performed, with the vast majority not being applicable to our code base (primarily e10s\/IPC bugs).
\n Security issues addressed: CVE-2026-16353, CVE-2026-16408, CVE-2026-16389 CVE-2026-74982, CVE-2026-74969 (DiD), CVE-2026-74977 (DiD), CVE-2026-74945, CVE-2026-74964, CVE-2026-74971, CVE-2026-74943, CVE-2026-92016 (DiD), CVE-2026-92044, CVE-2026-92049, CVE-2026-92030, CVE-2026-92012, and many others that do not have a CVE designation.<\/p>\n

Basilisk Changes:
\n Added Intl.RelativeTimeFormat polyfill
\n Introduced MIPS64EL Linux Builds. Please note that these have only been tested on Loongson 3A4000 MIPS hardware and may fail on other MIPS hardware due to differences in a few CPU opcodes between Loongson MIPS and other MIPS CPUs. They are also built on a fairly bleeding edge Linux distribution (AOSC) and so may not work on older versions of Linux for MIPS64EL.
\n Built on UXP commit: e59e88bfd5<\/p>\n

Included Polyfills:
\n This release includes the following polyfills:
\n image.decode
\n Intl.DisplayNames
\n Intl.RelativeTimeFormat
\n Intl.Segmenter
\n en-US only Intl.ListFormat
\n Microsoft-specific (Outlook, Azure, etc) webauthn shim
\n TestDecoderStream
\n TextEncoderStream
\n TransformStream
\n ReadableStream pipeTo
\n ReadableStream pipeThrough
\n getAnimations
\n elementFromPoint finite values<\/p>\n

UXP Implementation Notes:
\n Primarily in German, the \u00df character (known as “eszett” or “scharfes S”) can be written with its proper character or with the alternative latinized “ss”. Because the uppercase version of \u00df was not commonly included in system fonts for a while, with historical typewriter conventions in mind, converting text to uppercase would convert \u00df to “SS”. However, this can cause ambiguity in some wordswhere both a spelling with \u00df and with “ss” exist which have different meaning. Since the uppercase unicode character has been included in system fonts for a long time now and is more commonly also included in custom fonts, this conversion is an old notion. The linguistic bodies in Germany also prefer using the uppercase \u1e9e now when capitalizing, so Basilisk will use the unicode character by default going forward when converting case (e.g. with CSS or JavaScript), abandoning the on-the-fly conversion to “SS”.
\n Our FreeBSD GTK3 builds are making use of the new option to build NPAPI support without GTK2 dependencies. If you need this functionality on FreeBSD, either use the GTK2 binaries or build from source yourself with the appropriate configuration for your system.<\/p>\n

Win X64<\/span><\/a>
<\/div><\/div>\n
64bit Zip<\/span><\/a>
<\/div><\/div>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Basilisk is a free and Open Source XUL-based web browser, featuring the well-known Firefox-style interface and operation. It is based…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[22],"tags":[1085,743],"_links":{"self":[{"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=\/wp\/v2\/posts\/144"}],"collection":[{"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=144"}],"version-history":[{"count":0,"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=\/wp\/v2\/posts\/144\/revisions"}],"wp:attachment":[{"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=144"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=144"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=144"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}