March 2009 - Dillo-dev - lists.mailman3.com

http authentication: shred passwords

by corvid＠lavabit.com

Justus wrote: > I've been working on http digest authentication (mostly done, needs some > more testing) and I noticed that sensitive information like passwords > aren't cleared before freeing the memory. > > I know this is kind of pointless for basic authentication since > realm->authentication holds the base64 encoded password anyway, but at > least it isn't stored in plain text. It is however very useful for the > http digest authentication which only stores the hashed password. > > There is a small problem with the attached patch (at least I think that > there is): it modifies a member variable of fltk::Input that is declared > const char *. I *think* that this does not cause any problems in > practice since the widget is destroyed shortly after this anyway and I > believe that doing this right requires patching fltk. What do you think? So far as I know (for whatever that's worth), it should be all right since the value wasn't set with static_text().

March 22, 2009

http authentication: shred passwords

by 4winter＠informatik.uni-hamburg.de

Skipped content of type multipart/mixed

March 22, 2009

[bug]: more CSS margin problems

by onepoint＠starurchin.org

On Sat, Mar 21, 2009 at 10:25:32AM +0100, Hofmann Johannes wrote: > It seems that dw/* is not designed to handle overlapping widgets. > Maybe we should just disable negative margins for now. Or at least > ensure that only margins overlap but not widget contents. Other > ideas? No ideas, I'm afraid. I haven't really looked at Dillo's CSS or layout code. Regards Jeremy Henty

March 22, 2009

Ohloh does not accept http://hg.dillo.org/dillo as Enlistment for the Dillo browser.

by Johannes.Hofmann＠gmx.de

On Fri, Mar 20, 2009 at 07:05:24PM +0100, Andreas Kemnade wrote: > Hi, > > On Tue, 24 Feb 2009 20:21:52 +0100 > Detlef Riekenberg <wine.dev(a)web.de> wrote: > > > Hi. > > Thanks for working on Dillo. > > > > I tried to update the Dillo Project Page on Ohloh, > > but the the repository failed on the id command. > > > > ...$hd id http://hg.dillo.org/dillo > > abort: cannot look up remote revision; remote repository does not > > support the 'lookup' capability! > > > $ hg id http://hg.dillo.org/dillo > f4d5923de127 > Thanks Andreas!

March 21, 2009

[bug]: more CSS margin problems

by Johannes.Hofmann＠gmx.de

On Sat, Mar 21, 2009 at 06:54:30AM +0000, Jeremy Henty wrote: > > This looks like a horizontal version of the previous problem I > reported. The online example is > > http://rest-client.heroku.com/rdoc/fr_class_index.html > > The text that sticks out of the left of the coloured area is dead: you > can't select it or click it, and if you drag another window over it > slowly from from left to right then it doesn't redisplay properly. > Minimal example attached. It seems that dw/* is not designed to handle overlapping widgets. Maybe we should just disable negative margins for now. Or at least ensure that only margins overlap but not widget contents. Other ideas? Cheers, Johannes

March 21, 2009

[bug]: more CSS margin problems

by onepoint＠starurchin.org

This looks like a horizontal version of the previous problem I reported. The online example is http://rest-client.heroku.com/rdoc/fr_class_index.html The text that sticks out of the left of the coloured area is dead: you can't select it or click it, and if you drag another window over it slowly from from left to right then it doesn't redisplay properly. Minimal example attached. Regards, Jeremy Henty

March 21, 2009

bookmark dpi - cleanups

by 4winter＠informatik.uni-hamburg.de

Skipped content of type multipart/mixed

March 20, 2009

Ohloh does not accept http://hg.dillo.org/dillo as Enlistment for the Dillo browser.

by akemnade＠tzi.de

Hi, On Tue, 24 Feb 2009 20:21:52 +0100 Detlef Riekenberg <wine.dev(a)web.de> wrote: > Hi. > Thanks for working on Dillo. > > I tried to update the Dillo Project Page on Ohloh, > but the the repository failed on the id command. > > ...$hd id http://hg.dillo.org/dillo > abort: cannot look up remote revision; remote repository does not > support the 'lookup' capability! > $ hg id http://hg.dillo.org/dillo f4d5923de127 Greetings Andreas Kemnade

March 20, 2009

[bug]: CSS strangeness: disappearing text

by Johannes.Hofmann＠gmx.de

On Fri, Mar 20, 2009 at 05:50:49AM +0000, Jeremy Henty wrote: > > Something funny is happening with this URL > > http://marcofrasca.wordpress.com/2009/03/18/updated-paper/ > > In Dillo, all of the first paragraph except for the last line has > disappeared. Also, if you click and drag around that line you can > make it disappear too. It reappears as soon as you drag the window > anywhere. > > I have stripped this down to a minimal example (attached). Both lines > of the style file have to be present to get the effect. > Interestingly, in Firefox this example also only shows the bottom line > of the paragraph, but it puts it right at the top of the screen. So > it looks as though Dillo sort of understands that most of the > paragraph is invisible, but does not put it in the right place? uh, that one is hard... It has to do with how Textblock places child widgets. It seems that reverting fa7a0bd75ff1 fixes this specific issue, but that causes a lot of other glitches e.g. on google.com. I'll see if I can find a fix. Regards, Johannes

March 20, 2009

[bug]: CSS strangeness: disappearing text

by onepoint＠starurchin.org

Something funny is happening with this URL http://marcofrasca.wordpress.com/2009/03/18/updated-paper/ In Dillo, all of the first paragraph except for the last line has disappeared. Also, if you click and drag around that line you can make it disappear too. It reappears as soon as you drag the window anywhere. I have stripped this down to a minimal example (attached). Both lines of the style file have to be present to get the effect. Interestingly, in Firefox this example also only shows the bottom line of the paragraph, but it puts it right at the top of the screen. So it looks as though Dillo sort of understands that most of the paragraph is invisible, but does not put it in the right place? Regards, Jeremy Henty

March 20, 2009