![]()
Apple have just addressed a bunch of stability fixes and security vulnerabilities in a minor update announced for their Safari 4 browser. Given that the new Safari 4.0.2 improves on the JavaScript front with a better Nitro JavaScript engine, and “includes the latest compatibility and security fixes”, the update is expected to solve those pesky crashing problems that we’ve been dealing with lately.
One of the vulnerabilities was caused by an issue in WebKit’s handling of the parent and top objects, which allowed maliciously crafted websites to deploy cross-site scripting attacks. Another important bug was in the WebKit’s handling of numeric character reference that caused memory corruption issues which lead to unexpected application termination or arbitrary code execution.
These have been taken care of in the new Safari 4.0.2 which is now available for Mac (OS X Leopard and OS X Tiger) and Windows (either XP and Vista).
Related Reading on TFTS
