Dies ist die aktuelle Version. · Veröffentlicht:
Installationsdateien 5.10.0
| Architektur | Typ | Bereich | Dateigröße | Download | SHA256 |
|---|---|---|---|---|---|
| 64-Bit | EXE (NSIS) · en-US | — | — | github.com | VirusTotal |
| ARM64 | EXE (NSIS) · en-US | — | — | github.com | VirusTotal |
Link und SHA256 stammen aus dem Community-Manifest des Windows-Paket-Managers. Vergleichen Sie den Hash der heruntergeladenen Datei, bevor Sie sie ausführen.
Versionshinweise
Major updates
- Widgets: a new "Online" tab browses the widgets.electerm.org registry and installs a widget in one click. Before installing, it shows the source repository, pinned commit and file list for review, warns that a widget's main.js runs with full Node privileges, and verifies every downloaded file against the registry hash; revoked widgets are flagged
Bug fixes
- Security: HTTP Basic credentials entered in a web-session tab are now bound to the origin they were typed for, so cross-origin requests and redirects no longer receive them; guest permission checks are denied as well (GHSA-3mh6-qf3v-q6cr)
- Fix AI presets still offering retired Gemini and Claude models, replaced with current ones (#4716) by @pcbeingused333
重大更新
- 小组件：新增「在线」标签页，可浏览 widgets.electerm.org 目录并一键安装。安装前会展示来源仓库、锁定的 commit 与文件列表供确认，并提示小组件的 main.js 会以完整 Node 权限运行；安装时会按目录哈希校验每个文件，已撤销的小组件会给出提示
问题修复
- 安全：修复 Web 会话标签中输入的 HTTP Basic 凭据会被附加到该标签所有请求（包括跨站请求与重定向）的问题，现在凭据仅用于输入时对应的 origin；同时补齐访客权限检查的拦截 (GHSA-3mh6-qf3v-q6cr)
- 修复 AI 预设中仍提供已下线的 Gemini / Claude 模型的问题，更新为当前可用模型 (#4716)（由 @pcbeingused333 提供）
Download下载: https://electerm.org
