July 2004 - Dillo-dev - lists.mailman3.com

[Dillo-dev]https
by Jorge Arellano Cid Sept. 12, 2004

Sept. 12, 2004

Hi, Here's the https-relevant part of a private email: ---------- Forwarded message ---------- Date: Wed, 7 Jul 2004 10:25:24 -0400 (CLT) From: Jorge Arellano Cid <jcid(a)dillo.org> To: Brett Wynkoop <wynkoop(a)wynn.com> Subject: Re: dillo 0.8.2rc2 On Wed, 7 Jul 2004, Brett Wynkoop wrote: > [...] > I was surprised that there is no SSL support. I remember a recent > release used wget for ssl. Is there any way to re-enable that on the > current release? The problem is that our former plugin didn't do certificate authentication (among other things commented in the code). As the Dillo project takes security seriously, it was withdrawn from the newer releases... In other words, the https dpi allowed the user to see https URLs, but there was no security backing it. I know that some big browsers had the same bug for years, before it was made public. This allowed for instance, man-in-the-middle attacks by faking the destination site. Https is a very complex matter, and I'd rather prefer not to assert ours will be flawless. The least we can do is not to release one we know is broken. I hope we can make a good https dpi soon. If you want to use it anyway, assuming the risks, just get the https.c from 0.8.0 and drop it into the new tree. You will not even be able to post or send forms, but it'll allow to read some https forums. Atentamente Jorge.-

4 6

[Dillo-dev]thread-safe X at fresco
by robert w hall Aug. 13, 2004

Aug. 13, 2004

The thread-safe versions of XFree3.3.3.1 have disappeared from linuxsavvy, (and my own attempts too recompile my own have produced useable, but not wholly error-free results)... But I note that vintage.fresco.org still has two earlier thread-safe Xlibs, 3.1.2 and 3.2, linked statically. Anyone used these? dillo glib gtk appear only to use libX11, libXext, (which is all the earlier fresco 3.1.2 package provides). Bob Going bravely backwards from kernel 2.6.7! -- robert w hall

2 3

[Dillo-dev][patch] dillo-cvs fails to detect OpenSSL on FreeBSD
by Thomas-Martin Seck July 31, 2004

July 31, 2004

Hi all, I am the current maintainer of the dillo FreeBSD port. While looking at the current CVS version, I noticed that it fails to detect OpenSSL on FreeBSD (which has OpenSSL 0.9.7d in the base system) because the test program does not link to libcrypto, which causes the linking of the test program to fail with "unresolved symbols". The following patch "works for me", i.e. dillo compiles and the https filter does not error out directly (well, it failed anyway with "The remote certificate cannot be trusted" when I tried accessing <https://www.iks-jena.de> but I guess that is to be expected right now?). Anyway, keep up the good work! Index: configure.in =================================================================== RCS file: /sfhome/cvs/dillo/dillo/configure.in,v retrieving revision 1.76 diff -u -u -r1.76 configure.in --- configure.in 16 Jul 2004 22:57:19 -0000 1.76 +++ configure.in 31 Jul 2004 20:16:28 -0000 @@ -229,7 +229,7 @@ if test "x$ssl_ok" = "xyes"; then old_libs="$LIBS" - AC_CHECK_LIB(ssl, SSL_library_init, ssl_ok=yes, ssl_ok=no) + AC_CHECK_LIB(ssl, SSL_library_init, ssl_ok=yes, ssl_ok=no, -lcrypto) LIBS="$old_libs" fi

1 0

[Dillo-dev]RE: MGDillo-porting Dillo to MiniGUI,are you interesting?
by david feldman July 27, 2004

July 27, 2004

Hello, Since I began using dillo (about a month or so), this is the second time I've seen the topic of a light(er) weight toolkit (the former was fltk, I believe.) I have been considering if it is possible to port either (miniGUI or fltk) or something similar to windows CE; there is a problem in the world of windows CE where the browser microsoft supplied (Pocket IE 3 for CE 2.11 and Pocket IE 4 for CE 3.0) is essentially obsolete (the problem is so severe on CE 2.11 that those machines aren't really robust enough even to access commercial hotspot websites that depend on some degree of competent web client.) There isn't as far as I know a browser under current development targeted at the Windows CE world (that is, something really independent of Pocket IE.) When I first saw Dillo it occured to me that a "Dillo for widows CE" would be nice, but as I looked at GTK+ it seemed alot of work. So, I'm wondering if anyone here in dillo-land has any interest in attacking a port to CE, perhaps through one of these lighter-weight GUI libraries? Tnx much for your time, Dave wb0gaz(a)hotmail.com >From: dillo-dev-request(a)lists.auriga.wearlab.de >Reply-To: dillo-dev(a)lists.auriga.wearlab.de >To: dillo-dev(a)lists.auriga.wearlab.de >Subject: Dillo-dev digest, Vol 1 #480 - 2 msgs >Date: Tue, 27 Jul 2004 06:28:01 +0200 > >Send Dillo-dev mailing list submissions to > dillo-dev(a)lists.auriga.wearlab.de > >To subscribe or unsubscribe via the World Wide Web, visit > http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev >or, via email, send a message with subject or body 'help' to > dillo-dev-request(a)lists.auriga.wearlab.de > >You can reach the person managing the list at > dillo-dev-admin(a)lists.auriga.wearlab.de > >When replying, please edit your Subject line so it is more specific >than "Re: Contents of Dillo-dev digest..." > > >Today's Topics: > > 1. short absence... (Jorge Arellano Cid) > 2. MGDillo-porting Dillo to MiniGUI,are you interesting? (suowei) > >--__--__-- > >Message: 1 >Date: Mon, 26 Jul 2004 13:15:55 -0400 >From: Jorge Arellano Cid <jcid(a)dillo.org> >To: Dillo mailing list <dillo-dev(a)lists.auriga.wearlab.de> >Subject: [Dillo-dev]short absence... > >Hi there, > > I'm leaving town for a few days. I'll be back on Thursday. > > Cheers > Jorge.- > > >--__--__-- > >Message: 2 >Date: Tue, 27 Jul 2004 09:20:31 +0800 >From: suowei <suowei(a)minigui.net> >To: dillo-dev(a)lists.auriga.wearlab.de >Subject: [Dillo-dev]MGDillo-porting Dillo to MiniGUI,are you interesting? > >Hi,everyone > I am a developer from Beijing Frynman Software of >China(http://www.minigui.com),My boss leaded the >MiniGUI which is lighted GUI library of linux as an open source project >some years ago(http://www.minigui.org). > Now,we want to startup an open source project--MGDillo,its target is >to port the Dillo from GTK+ to MiniGUI, >so,maybe we perhaps need the Dillo developers' help,on the same time,I >hope you can visit the MGDillo's website >:http://www.minigui.net. > If you are interested in this project,you can attend the maillist: >http://lists.minigui.net/cgi-bin/mailman/listinfo/minigui-dillo >welcome everyone~~~ > > suowei > >--------------------------------- >Suo Wei >Beijing Feynman Software Technology Co., Ltd. >A Embedded Linux Tech. & Dev. Tools Provider. > >Mailbox: suowei(a)minigui.net >Website: http://www.minigui.com >Tel: (8610)-82570025 Fax: (8610)-82570026 > > > > >--__--__-- > >_______________________________________________ >Dillo-dev mailing list >Dillo-dev(a)lists.auriga.wearlab.de >http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev > > >End of Dillo-dev Digest _________________________________________________________________ FREE pop-up blocking with the new MSN Toolbar get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/

1 0

[Dillo-dev]About the HTML Form
by 索炜 July 27, 2004

July 27, 2004

Hi,there I am reading the Dillo's source code,I want to read the HTML Form part,but I can not find which file is include the form function,who can tell me? thank you:) --------------------------------- Suo Wei Beijing Feynman Software Technology Co., Ltd. A Embedded Linux Tech. & Dev. Tools Provider. Mailbox: suowei(a)minigui.net Website: http://www.minigui.com Tel: (8610)-82570025 Fax: (8610)-82570026

1 0

[Dillo-dev]MGDillo-porting Dillo to MiniGUI,are you interesting?
by suowei July 27, 2004

July 27, 2004

Hi,everyone I am a developer from Beijing Frynman Software of China(http://www.minigui.com),My boss leaded the MiniGUI which is lighted GUI library of linux as an open source project some years ago(http://www.minigui.org). Now,we want to startup an open source project--MGDillo,its target is to port the Dillo from GTK+ to MiniGUI, so,maybe we perhaps need the Dillo developers' help,on the same time,I hope you can visit the MGDillo's website :http://www.minigui.net. If you are interested in this project,you can attend the maillist: http://lists.minigui.net/cgi-bin/mailman/listinfo/minigui-dillo welcome everyone~~~ suowei --------------------------------- Suo Wei Beijing Feynman Software Technology Co., Ltd. A Embedded Linux Tech. & Dev. Tools Provider. Mailbox: suowei(a)minigui.net Website: http://www.minigui.com Tel: (8610)-82570025 Fax: (8610)-82570026

1 0

[Dillo-dev]short absence...
by Jorge Arellano Cid July 26, 2004

July 26, 2004

Hi there, I'm leaving town for a few days. I'll be back on Thursday. Cheers Jorge.-

1 0

[Dillo-dev]Re: any documents about html parser?
by Calvin Yu July 26, 2004

July 26, 2004

yes, I'm going to make dillo able to render chinese. Furthermore, I wish I can add support for JavaScript for dillo. So I must analyse the code of html parser. Am I right? By the way, what do you think of porting GUI to gtk+-directfb? Then we don't need X Windows any longer. I'm a newbie in browser. Please tell me whether what I think is right or not. Thank you very much!

1 0

[Dillo-dev]HTTPS Cleanup
by Garrett Kajmowicz July 24, 2004

July 24, 2004

I have gone through and modified the https.c file to use (what I believe are) your preferred coding standards, with one exception. I *cannot* stand unbraced if statements (or any other statements), and thus I braced them in two locations. I also don't care for use of the tertiary operator, but you wrote the function it is used in, so I don't plan on touching it. I would also like your opinion on how to "clean up" the function save_certificate_home() It has three exit points, and dropping it to fewer would be somewhat of a challenge to do cleanly. There are a few loctions where I believe you broke a statement which would ift on one line, specifically snprintf statements. I might have dont this (though I can't think of why). If this is the case, could you let me know your reasoning behind this? I'd like to learn from this if possible... - Garrett Kajmowicz

2 3

[Dillo-dev]Your attention please: we have a webmaster!
by Jorge Arellano Cid July 23, 2004

July 23, 2004

Hi there, Yes it's true, now we have a dedicated webmaster. Jörgen Viksell (or Jorgen if the umlaut doesn't display) has accepted these duties, so now you'll see our old site starts to renew. For instance now we have a FAQ link (a work in progress). Please contact him for site-related suggestions/fixes/etc. He's in charge now. Cheers Jorge.- PS: Jörgen: please don't forget the webmaster link. (you can use an image or the same mangling as in the bugtrack for the email address). PS2: Garret: I added your suggestion to the NC_Design.

1 0

Re: [Dillo-dev]HTTPS certificate support
by Garrett Kajmowicz July 23, 2004

July 23, 2004

> Producing code quick is not the goal. The point is to produce > well designed code that works OK, and that's easy to > read/review/follow and thus to maintain. I'm spending a lot of time on this because I've been working on a project for several months to revamp some PCs with 32MB of RAM to be sent to the homes of deaf people. I'm running a uClibc based distribution, but I need a good web browser which works. Thus I want to get this done as soon as possible. > The problem I found (and probably your classmates) is that > reviewing rushed-code takes more time than necessary, and once > understood, it changes. In my case is a bit worst because I took > the extra time to polish it, only to find it back with my work > wasted. I crank out a lot of code because I think quickly and clearly, and have no life. If I could comit often enough, I could gurantee you about 4 hours/day solid development for the next month and a half. More if I dropped another pet programming project and some metal work I am doing. I am usually the person doing the code reviews. I'm also the person who tends to put the most documentation into my code to make the most redably readable. > Let me suggest you a second stage after your code is working. > Stop, and take the same amount of time polishing it. Think of the > design, long functions, multiple exit points, global variables, > data structures, future additions, variable names, memory > management, comments, etc. > > Once you finish this second stage, testing for robustness will > be much easier (third stage). Once you've done it, your > classmates will love your code. Most of my classmates can't program *snort*. Then again, neither can the comp sci professors..... > Just an example, multiple exit points make code more complex to > grasp because you have to understand the flow of execution of > each one of the exits, before having confidence of not breaking > it with some changes. I would disagree with that point. With single exit point functions, you have to carry a variable (extra stack allocation) through the application and all code. Thus you can either have large numbers of nested statements (which is very effective and reasonably clean, but excedes line length) or you have your finalized variable being carried through the rest of the application with nothing else to do. With the multi-exit point strategy, you can exit the application as soon as you are done done whatever it is that you need to do. This way you aren't hanging around in the code any more. I have found that tends to make for better code than single-exit writing. > > Another big problem comes with finalization code (freeing > memory, leaving variables in a stable state, return codes, side > effects...). > > Take for instance yes_ssl_support(). Look at the many exit > points and its finalization code, and compare with a single exit > code version. > > It took a lot of time. > > Please follow my advice. Since this is the preffered coding standard (I suggest adding it to the coding standards on the web) I will follow it as you wish. I will follow any coding standards to the letter, and will take suggestions as I see fit. I will modify everything that I have writen to conform to your preferences, and resubmit. I'm tempted to blow away all of my work and start over sust so I can have a sync'd tree to make sane diffs against. *sigh* - Garrett

1 0

[Dillo-dev]HTTPS certificate support
by Garrett Kajmowicz July 22, 2004

July 22, 2004

OK - this patch backs out a few trivial changes which were made about 2 patches ago due to code redundancy and are no longer needed. This patch detects self-signed certificates and gives the user the option to permanently trust them, autosaving to the .dillo/certs directory. Please give this a whirl, and then commit it. Let me know when done so I can while my current devel tree clean and get a new copy - this way I don't have to manually correct all of the spelling errors with each patch :-) - Garrett

2 3

Re: [Dillo-dev]More https goodness
by Jorge Arellano Cid July 21, 2004

July 21, 2004

Hi Garret, On Fri, Jul 16, 2004 at 08:05:43PM -0400, Garrett Kajmowicz wrote: > I am going to start by appologizing: this diff contains two separate items. I > needed to do one to get the other to work, and I didn't want to risk having > one patch getting applied before the other. > > Anyways, two things done: > 1) Added a function to dpiutils which does the complete read in from stdin > for the dpi response tag and returns the option number selected. Please feel > free to add comments about error return values and so forth. > > 2) Added *preliminary* error checking in the https dpi which notifies the > user in the event that no certificate is presented or that the certificate is > not verified. I will do a more thorough breakdown and other options once I > know that this meets spec. Let me know if you prefer different wording on > the messages as well. > > In short, please review and commit. OK, I reviewed it an made some changes (now on CVS). I pondered a long time whether to make a generic function for parsing dpip dialog answers. Something like: a_Dpiutil_dialog_parse_answer(...) To me it seems that according to the simplicity principle of API design, sticking with Get_attr_value() instead of one custom parsing function per each dpip command is better... The same logic applies to the a_Dpip_build_command() I was thinking of. The interface for sending data may survive though. Anyway, the most important point of this patch is that after applying the patch, it seems not to trust even paypal! For instance: https://www.paypal.com/en_US/i/icon/secure_lock_2.gif gives me the warning dialog. Is this OK? Cheers Jorge.- PS: For those using CVS, you can avoid the dialogs by setting 'retval = 0' in https.c.

2 3

[Dillo-dev]any documents about html parser?
by Calvin Yu July 21, 2004

July 21, 2004

Hello everyone: Are there any documents about html parser in Dillo? It seems HtmlParser.txt is too brief. And it is not easy to analyse the code about html parser. Thanks a lot!

2 1

[Dillo-dev]form fields too narrow
by Thorben Thuermer July 21, 2004

July 21, 2004

Hello, it seems that dillo renders all text input fields in forms one character too narrow, for example on: http://www.efa.de/gvh/XSLT_TRIP_REQUEST2?language=en we have: <INPUT NAME="itdTimeHour" VALUE="17" SIZE="2" MAXLENGTH="2" ...> (field for the hour of the time) which clearly requests to be two charcters, but ends up having space for only one, making it hard to use (horizontal scrolling). in the source (html.c) i found: if ((attrbuf = Html_get_attr(html, tag, tagsize, "size"))) gtk_widget_set_usize(widget, strtol(attrbuf, NULL, 10) * gdk_char_width(widget->style->font, '0'), 0); which makes the fields too narrow... changing it to (1+strtol(attrbuf, NULL, 10)) fixes the problem. i can only assume that 'gtk_widget_set_usize' sets the *outside* dimensions of the widget? (or that something else is off there...) - Thorben

2 1

Re: [Dillo-dev]dpip dialog for https (and dpis in general)
by Jorge Arellano Cid July 21, 2004

July 21, 2004

Garret, Brian, CC: anyone interested ;) On Fri, 16 Jul 2004, Brian Hechinger wrote: > On Thu, Jul 15, 2004 at 11:31:12PM -0400, Jorge Arellano Cid wrote: >> >> I'll test and upload tomorrow. > > let us know, i'd love to test it. i just setup a new machine, and the latest > dillo in NetBSD's packages collection is 0.8.1, so i'm ready to upgrade > anyway. ;) The changes are now in the CVS. Example code can be find in the hello dpi (and also in nav.c). For instance, after upgrading the dpi binaries, launch Dillo and load this url "dpi:/hello/world". It will pop up a dialog, make a choice and look at the answer. repeat the test by going Back and Forward (the hello dpi is set to always reload). The relevant code is well commented. Look inside the hello dpi and you can also review the new dpiapi.[ch] files. Nav.c has an example of use for a_Interface_question_dialog() too. This should be enough for asking the user about certificates that can't be authenticated. Note that the code is not final, i.e. it needs some polishing and extensions. The good news is that in clearly illustrates the process and now is much easier to do it so. even the data structures and interface was thought to be extensible. Cheers Jorge.- Brian: unless you're interested in dpi development, or want to alpha test the https dpi, I'd recommend 0.8.2 as an upgrade.

3 6

[Dillo-dev]https patch
by Garrett Kajmowicz July 19, 2004

July 19, 2004

This patch allows the https dpi to release the memory used by the X509 certificate. This is a trivial patch. The call used to check the certificate increases a reference count, but it is never decreased, causing the memory not to be freed at the optimum time. This is not actually needed on a Linux system because of the MMU, but in the event this is converted to a server or run on a MMU-less processor, this could cause problems - I'm not familiar enough with the internals of OpenSSL to be certain. Anyways, please apply the following patch to CVS. btw, my configuration script diff seems not to have been applied yet. Are there any standards that I should be complying with that I am not? Thanks. More stuff to follow tonight. - Garrett

3 3

Re: [Dillo-dev]Cookie problem
by Brian Hechinger July 18, 2004

July 18, 2004

i told him about cookiesrc, he's going to try that. but that brings me to a cookie issue of my own. i have: ebay.com ACCEPT in my cookiesrc, but ebay keeps telling me that my browser is rejecting cookies. am i doing something silly? -brian On Sat, Jul 17, 2004 at 12:38:31PM +0200, Claus Conrad wrote: > Dear dillo community, > > I have subscribed to this list because I'm developing a PHP-based website > which I want to be compatible with dillo. The site is located at > http://www.kabbeleje.dk/vask/ . It uses PHP's session management, sending a > cookie named PHPSESSID to the browser on login. This works great in most > other browsers I tried, but somehow not in dillo. > > The PHP code I'm using looks something like > if (login_successful) { > session_start(); > // ... > header("Location: http://" . $_SERVER['HTTP_HOST'] . > dirname($_SERVER['PHP_SELF']) . "/index.php?PHPSESSID" . > strip_tags(session_id())); > } > > I added the get parameter to the redirect URL after trying without; both > ways seem to work in e. g. Mozilla, but it doesn't change anything in dillo. > The redirect works, but the user isn't logged in. I guess it's just a minor > erroneous piece in the code, but don't know where to look. Any help would be > very much appreciated. A test login is available on request, if necessary. > Thanks a lot in advance. > > Regards, > Claus > > _______________________________________________ > Dillo-dev mailing list > Dillo-dev(a)lists.auriga.wearlab.de > http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev -- "Suits, man. They are as incapable of logical thought as they are of honesty." -- Dave McGuire --

2 2

[Dillo-dev]Configure script patch
by Garrett Kajmowicz July 16, 2004

July 16, 2004

This patch updates the configuration system to chack for OpenSSL libraries, and compile appropriately. I have tested to make sure that the system work with both ssl enabled and disabled, though I do not know how well it will react to not have OpenSSL present at all. Along wwith those changes go changes to the https.c file to take advantage of this newly available information. In the event that it is compiled without ssl support, an error page will come back indicating that the dpi was compiled without ssl support, and link to the openssl website. btw, is there any easy command which will delete all of the non CVS files? make distclean seems to keep the configure script around, along with other cache information. - Garrett Kajmowicz

2 2

[Dillo-dev]dpip dialog for https (and dpis in general)
by Jorge Arellano Cid July 16, 2004

July 16, 2004

Hi there, In the afternoon I had a prototype working, wich BTW was very pleasing to see working, after living a long time as an abstract design. It needed some touches, and while working on them, some hidden bugs outside its scope showed in nav.c's repost dialog. Short story, I decided to integrate some code in interface.c with the new dialog renderer, use a more flexible design and fix the bugs. I'll test and upload tomorrow. Cheers Jorge.-

1 0

[Dillo-dev]Re: HTTPS
by Jorge Arellano Cid July 14, 2004

July 14, 2004

Hi Garret, I just finished uploading my patches to the dpis (those that were independent from your code but that required a merge) and the tarball tree you sent me. It comes with some minor modifications ... > Let me know what you think of the coding style, etc. Very clean and compliant with our Naming&Coding in general. I did minor changes, like keeping it inside 80 columns and switching "if(" to "if (" (not a requirement but just to be consistent with the rest of Dillo). Only in one function I needed to reindent to 3 spaces... Unto less trivial stuff, Makefile.am was modified so dpiutil.h gets in the tarball produced with `make dist`. It would be great if you can add some SSL library detection routine to configure.in so https.c uses the no_ssl_support() function when the libarry is not present (or detected). > Also, if you could give me some direction on how to implement the prompt for > unverified certificates (and the code/location to save them to), it would be > greatly appreciated. I'm working on this. Maybe tomorrow... For those that feel curious, you can get the latest CVS and test the new dpis. Just remember to install them after typing make! :-) More seriously, kill dpid and any running dpi before: 'make install' (or 'make install-strip'). Best Jorge.- PS: great start for 0.8.3-pre!

3 2

[Dillo-dev]Plugin infrastructure
by Garrett Kajmowicz July 14, 2004

July 14, 2004

Something with the DPI instrastructure needs to be considered - what to do if a plugin needs to prompt the user for some information. The need for this first came about while developping the https plugin - there needs to be a way to prompt the user in the event that the foreign system isn't trusted. This can currently be done through the use of direct calls to Gtk (I assume), but this is not the best result. It requires that everybody who needs to do user prompting write their own dialogs. It creates additional dependancies for the dpis. And it makes code upgrades more difficult - Should Dillo switch to another toolkit in the future for whatever reason (perhaps Gtk2?), all of the DPIs need to be rewritten. And in the event of multiple instances of Dillo running, it becomes impossible to determine which instance the prompt is for. My proposed solution to this problem is to create a new dpi command which is used to prompt the user for what to do. It should allow (require/default?) modal dialog boxes so that the prompt is associated with the Dillo instance the plugin is using. I am suggesting that the dpi command be 'prompt_user'. There would be one manditory field, 'type' which would indicate the type of prompt to use. Example values might be 'dialog' or 'file_save'. These types would be extensible. From there, additional tags would be allocated based on the type of prompt. For example, a 'file_save' prompt might have a default_filename tag. A 'dialog' would likely have a title, a message, and up to 3 button texts. In all cases, the responce should be a dpi message of type 'user_response' with a 'response' tag holding the value of the user input. At least this is my proposal. I'd like some feedback on it, and especially suggestions or better ideas. - Garrett Kajmowicz

4 6

Fwd: Re: [Dillo-dev]Plugin infrastructure
by Garrett Kajmowicz July 13, 2004

July 13, 2004

> In the discussions before introduction of dpi was the point UI could > entierely be done using standart html, rendered by dillo itself. > > Maybe we could use this here. > > I would see two (new) dpi commands: > -Pop a new dillo window (maybe with some args: modal, no toolbar, no > addressbar..., set its size, url) > -Make a window reload > > So dpi could make a window pop for asking anything about certificates, > with a standart html form in it. It would allow to change window title > (through <title>) and make the gui customisable for future needs, and > even be portable for gtk->other toolkit change. > > I thought of the 'reload window' feature not directly for https, but for > download dpi. This would allow us to update the status of current > downloads; shown in a dedicated window, somewhat ala Firefox, but again, > entierely in html. That is very interesting, but causes two problems. First of all, from what I have seen , it looks like it would be difficult to implement modal dialog boxes. This is important for security warnings so that they are not hidden or confused with other Dillo warnings. Secondly, this approach causes some problems. I am approaching this from the perspective of the https filter dpi, but I assume that the same problem would apply to any other related dpi. Firstly, a filter dpi runs in its own process for each call, not as a server. Thus every time a call is made to the https filter dpi, it runs in its entirety. This makes it difficult to handle a response from the user because the dpi is then required to write a web server capable of at the very least parsing http GET requests, which means opening up a socket and so forth. Needless to say, handling that is somewhat of a challenge from a filter dpi perspective. Secondly, for the https application, cookie/post/get datais likely to be sent, which means that any rerequest would have to be able to pass that data on exactly. Third, the https verification needs to be done after the ssl session is estabilshed, but before the http request is made (for security reasons). Thus any complicated scheme could result in multiple connections being made. Fourthly, I don't like it. That's the most important one of all :-) The html prompt window isn't a bad idea, but causes a lot of coding headaches on the dpi other end. But that's just my thought. If you think that an html prompt window would work, I'd appreciate a modified "hello" filter dpi as an example from which I could implement the required code. Thanks for the feedback - Garrett Kajmowicz -------------------------------------------------------

2 1

[Dillo-dev]0.8.2 - No PNG support, but config cound PNG available (attachment)
by Geek July 13, 2004

July 13, 2004

Hi, I just compiled and installed 0.8.2 on my Debian stable and gave it a shakedown. It doesn't display PNG images. 0.8.1 and earlier, no problems. I have attached the config.log file Thanks for any assistance. -- Gregg t3h g33k http://geek.scorpiorising.ca

1 0

RE: [Dillo-dev]Plugin infrastructure
by Eric Gaudet July 12, 2004

July 12, 2004

Dillo's html rendering capabilities are what we should use for advanced forms. We don't want to duplicate the form widgets into a native-gtk version like mozilla does with xul. The pageflow, the forms, images etc ought to be in html, even if it's a dpi serving them. Having a login/password modal box seems to be what people are used to, so I can see why we'd like to have that. I can imagine dpis other than https needing a login/password box, but I'm not sure I can imagine that for non-login purposes. In any case, anything more complicated than one string, one or two text boxes with lables (possibly hidden for passwords) and 1 or 2 buttons certainly belongs to a dedicated html page the dpi would build. I could live with an intermediate html login page for https or any other dpi myself. Best, EG > -----Original Message----- > From: dillo-dev-admin(a)auriga.wearlab.de > [mailto:dillo-dev-admin@auriga.wearlab.de] On Behalf Of > Garrett Kajmowicz > Sent: Monday, July 12, 2004 3:26 PM > To: dillo-dev(a)auriga.wearlab.de > Subject: Re: [Dillo-dev]Plugin infrastructure > > > I just came up with two other dialog box types we might need: > > A window with alterable caption/message text and either one > or two text boxes > with associated labels. One or both of the boxes should be > able to be set in > "password" mode. > > I'm not sure if that counts as one or two, so I'm inflating > my estimates to > look more impressive :-) > > - Garrett Kajmowicz > > _______________________________________________ > Dillo-dev mailing list > Dillo-dev(a)lists.auriga.wearlab.de > http://lists.auriga.wearlab.de/cgi-> bin/mailman/listinfo/dillo-dev > >

1 0

[Dillo-dev]sparc success for 0.8.2
by Riccardo Mottola July 12, 2004

July 12, 2004

Hey, I just wanted to report that the final release of dillo compiles and seems to work fine here on solaris 6 -Riccardo

1 0

[Dillo-dev]HTTPS
by Garrett Kajmowicz July 12, 2004

July 12, 2004

OK - I have created a preliminary HTTPS implementation using openssl. It checks to see if a site certificate chain is valid. Unfortunately, I'm not sure how to create a dialog to prompt the user, so the "ask the user" function just returns continue. Should I use glib/gtk or some dpi communication message? The totality of the dpi stuff I have done is about 15k or so. Please let me know if you are interested and I will email it to you post haste. - Garrett Kajmowicz

2 1

[Dillo-dev]HTTPS
by Garrett Kajmowicz July 10, 2004

July 10, 2004

Is anybody currently actively working on HTTPS support? If not, how much work would be involved? I have some basic experience working with OpenSSL. Unfortunately, I have almost no gtk experience (I'm a Qt kind of person). I have some spare time, and would be willing to help, if I could, though I've never worked on a web browser before. Closest I have come is writing PHP. - Garrett Kajmowicz

1 0

[Dillo-dev]Re: Remote control of displayed URL
by Ian Walberg July 9, 2004

July 9, 2004

Jorge, I have a kiosk type setup where I need to be able to reset dillo to a given URL from another programme and then allow the user to navigate on their own. I really do not care how this is achieved but I do not want to restart dilio with a specific URL each time. Thanks Ian -----Original Message----- From: dillo-dev-admin(a)auriga.wearlab.de [mailto:dillo-dev-admin@auriga.wearlab.de] On Behalf Of dillo-dev-request(a)auriga.wearlab.de Sent: 09 July 2004 05:27 To: dillo-dev(a)auriga.wearlab.de Subject: Dillo-dev digest, Vol 1 #462 - 1 msg Send Dillo-dev mailing list submissions to dillo-dev(a)lists.auriga.wearlab.de To subscribe or unsubscribe via the World Wide Web, visit http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev or, via email, send a message with subject or body 'help' to dillo-dev-request(a)lists.auriga.wearlab.de You can reach the person managing the list at dillo-dev-admin(a)lists.auriga.wearlab.de When replying, please edit your Subject line so it is more specific than "Re: Contents of Dillo-dev digest..." Today's Topics: 1. Re: Remote control of displayed URL (Jorge Arellano Cid) --__--__-- Message: 1 Date: Thu, 8 Jul 2004 08:26:48 -0400 (CLT) From: Jorge Arellano Cid <jcid(a)dillo.org> To: Dillo mailing list <dillo-dev(a)lists.auriga.wearlab.de> Subject: Re: [Dillo-dev]Remote control of displayed URL Hi Ian, On Tue, 6 Jul 2004, Ian Walberg wrote: > I would like to be able to command dillo via a socket to a specific > URL from another application. > > Can this be done already? Yes it can be done. The specific dpi to provide for that service is not written yet, but the bookmarks-dpi commands dillo to open and refresh URLs all the time. > I tried a simple server plugin but did not get the > results I was looking for. Please explain further what you want to do. It may be a couple of days to write a specific server and get it working depending on what is required. > Thanks No problem. Cheers Jorge.- --__--__-- _______________________________________________ Dillo-dev mailing list Dillo-dev(a)lists.auriga.wearlab.de http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev End of Dillo-dev Digest

1 0

[Dillo-dev]Remote control of displayed URL
by Ian Walberg July 8, 2004

July 8, 2004

I would like to be able to command dillo via a socket to a specific URL from another application. Can this be done already? I tried a simple server plugin but did not get the results I was looking for. Thanks Ian

2 1

[Dillo-dev]dillo-0.8.2
by Jorge Arellano Cid July 7, 2004

July 7, 2004

Hi guys, I just uploaded the new dillo-0.8.2 to our site. It will be announced just after Kelson and Phil can upgrade the Dillo packages they make, and after Sebastian and I finish setting a much requested donations link. Thanks to all of you that have asked for a way to support the Dillo project. More about this later... Please download the new tarball and don't hesitate to write if you find a glitch. It may be still on time to fix (before the announcement). Best Jorge.-

3 4

[Dillo-dev]Life goes fast...
by Jorge Arellano Cid July 7, 2004

July 7, 2004

Hi there, The official 0.8.2 announcement is still pending, but the CVS already started to move! --I hope this to be a good sign. Cheers Jorge.- PS: 0.8.2 will be released as is, not with the latest patch(es).

1 0

Re: [Dillo-dev]dillo-0.8.2
by Jorge Arellano Cid July 6, 2004

July 6, 2004

On Tue, 6 Jul 2004, robert w hall wrote: > In article <Pine.LNX.4.60.0407061545350.1610(a)infinity.cl>, Jorge > Arellano Cid <jcid(a)dillo.org> writes >> >> Hi guys, >> >> I just uploaded the new dillo-0.8.2 to our site. > ... > > any changes from rc2? Good question... No, just stuff like the text switch from "0.8.2-rc2" to "0.8.2". Cheers Jorge.-

1 0

[Dillo-dev]Download with external utility?
by Todd Slater July 1, 2004

July 1, 2004

In one of the 0.7 releases I had a patch that allowed me to right-click a link and choose to download with an external utility as specified in ~/.dillo/dillorc. It seems that the last time I tried it on a newer (0.8) release it did not "take" the patch. I can, however, still use the open in external browser option, which was part of the same patch. Should I still be able to apply the download patch to the newest versions rather easily, and if so how? Thanks, Todd -- Name that tune #10: Now a very great man once said that some people will rob you with a fountain pen; it didn't take too long to find out just what he was talking about.

1 0

Re: [Dillo-dev]Hi, i am newer to this list.
by Hermit July 1, 2004

July 1, 2004

Hi, Jorge Sure, i wish i can collaborate with your guys, but how can i join this team? are there any task list? or even you can assign some tasks to me ? BGs/Hermit Date: Fri, 25 Jun 2004 13:05:07 -0400 (CLT) From: Jorge Arellano Cid <jcid(a)dillo.org> To: Dillo mailing list <dillo-dev(a)lists.auriga.wearlab.de> Subject: Re: [Dillo-dev]Hi, i am newer to this list. Hi, > Hi, All > i am newer to this list. now i try to port dillo > to a embedded device. there are few memory and storage > in this kind of device. > dillo is based on gtk+, it is impossible to port > gtk to embedded device because of its size. We know that, and GTK2 is even bigger. > now i try to make dillo to base on microwin+fltk. > i know that there are plan to make dillo base on fltk. > maybe your guys can give me some suggestion about how > to port dillo to base on fltk? Do you want to do it alone? Why not collaborate with us? Cheers Jorge.- _________________________________________________________ Do You Yahoo!? 100兆邮箱够不够用？雅虎电邮自助扩容！ http://cn.rd.yahoo.com/mail_cn/tag/100m/*http://cn.promo.yahoo.com/minisite…

2 1

[Dillo-dev]dillo-0.8.2-rc2.tar.bz2 (rc2)
by Jorge Arellano Cid July 1, 2004

July 1, 2004

Hi guys, The first release candidate got only one problem report (on headers), but I couldn't help adding a couple of tiny enhancements. So this is it: + * Set some initial socket-buffering for dpis (in dpid). + * Made the rendered area keep its focus after a form submition. + * Fixed some include files in src/IO/. The socket-buffering helps with 2.6.x kernels (probably a bug in the kernel: the "first" data transfer in the sockets usually is slow, from then and on, it goes as fast as with 2.4.x, but if you don't use the socket for a long time it gives you another slow start). The second fix is just a UI improvement. The third is a cleanup. Please test it from: http://www.dillo.org/download/dillo-0.8.2-rc2.tar.bz2 Cheers Jorge.-

1 0