Toto je nejnovější verze. · Datum vydání:
Instalační soubory 5.10.0
| Architektura | Typ | Pro koho | Velikost souboru | Stáhnout | SHA256 |
|---|---|---|---|---|---|
| 64bit | EXE (NSIS) · en-US | — | — | github.com | VirusTotal |
| ARM64 | EXE (NSIS) · en-US | — | — | github.com | VirusTotal |
Odkaz a SHA256 pocházejí z komunitního manifestu Windows Package Manageru. Před spuštěním porovnejte hash staženého souboru.
Seznam změn
Major updates
- Widgets: a new "Online" tab browses the widgets.electerm.org registry and installs a widget in one click. Before installing, it shows the source repository, pinned commit and file list for review, warns that a widget's main.js runs with full Node privileges, and verifies every downloaded file against the registry hash; revoked widgets are flagged
Bug fixes
- Security: HTTP Basic credentials entered in a web-session tab are now bound to the origin they were typed for, so cross-origin requests and redirects no longer receive them; guest permission checks are denied as well (GHSA-3mh6-qf3v-q6cr)
- Fix AI presets still offering retired Gemini and Claude models, replaced with current ones (#4716) by @pcbeingused333
重大更新
- 小组件:新增「在线」标签页,可浏览 widgets.electerm.org 目录并一键安装。安装前会展示来源仓库、锁定的 commit 与文件列表供确认,并提示小组件的 main.js 会以完整 Node 权限运行;安装时会按目录哈希校验每个文件,已撤销的小组件会给出提示
问题修复
- 安全:修复 Web 会话标签中输入的 HTTP Basic 凭据会被附加到该标签所有请求(包括跨站请求与重定向)的问题,现在凭据仅用于输入时对应的 origin;同时补齐访客权限检查的拦截 (GHSA-3mh6-qf3v-q6cr)
- 修复 AI 预设中仍提供已下线的 Gemini / Claude 模型的问题,更新为当前可用模型 (#4716)(由 @pcbeingused333 提供)
Download下载: https://electerm.org