- Dillo-dev - lists.mailman3.com

[Issue]: Parsing empty domain attributes in cookies
by Julian Jørgensen April 29, 2026

April 29, 2026

Hi Dillo devs, Thanks for a great browser :-). I'm having great fun using it for accessing smaller sites. However, I might have found a minor issue with the way it handles cookies. I'm not very familiar with browser, so the problem is most likely on the site I'm trying to access. I use this pretty popular search engine called kagi.com. They have a html mode, which I enjoy testing in browsers like Dillo. The problem is that their session cookie is saved with an empty domain like so: `Domain=;`. As far as I can understand from [1], it seems that this should result in Dillo (the user agent?) ignoring this key/value pair. However, Dillo will parse the domain as "", which will fail the domain/host verification later in the program. I have attached a git formatted patch to demonstrate the issue. After applying this change, the kagi.com page works like I would expect. Best regards, Julian Jørgensen [1]: https://www.rfc-editor.org/rfc/rfc6265#section-5.2.3

2 1

Release 3.3.0
by Rodrigo Arias April 26, 2026

April 26, 2026

Hi, I'm happy to announce that the Dillo 3.3.0 release is finally out: https://dillo-browser.org/release/3.3.0/ It follows the FLTK 1.4.5 release made yesterday, which contains some bug fixes for font rendering with Pango/Cairo. Enjoy!, Rodrigo.

3 2

A new SearXNG search randomizer for Dillo
by a1ex＠dismail.de April 25, 2026

April 25, 2026

Hi, I have created a directory and search redirector for unofficial SearXNG instances. These are instances which do not appear on 'searx.space' or 'farside.link'. They usually seem to work better than the official ones, due to the fact that they aren't as highly publicized and have less load. The directory is here: https://alex.envs.net/searxng.html This link will automatically send you to a random instance: https://alex.envs.net/searx-rand.sh Finally, you can search directly from Dillo using a random instance by putting the following line into your dillorc: search_url="us UnScripted https://alex.envs.net/search.sh?%s" If anyone has links to additional SearXNG instances which I have not covered, and are not present on the official list, please let me know! Keep in mind that the instance must work without JavaScript! Regards, Alex

1 0

[PATCH] Add user-controllable Sec-GPC header
by a1ex＠dismail.de April 15, 2026

April 15, 2026

Hi, The attached patch adds a Sec-GPC header to Dillo. It defaults to ON, and is controllable through a dillorc setting of 'http_sec_gpc'. Also, I changed DNT to be user-controllable with a dillorc setting of 'http_dnt', also defaults to ON. I know that this is too late to get in for the 3.3.0 release, but I'm sending it for review now, and if there are any issues it should allow plenty of time to fix. Regards, Alex

1 0

[PATCH] Remove deprecated DNT header
by a1ex＠dismail.de April 15, 2026

April 15, 2026

Hi, The 'Do Not Track' header has been abandoned by W3C and most major browsers. Very few advertising companies actually supported DNT. https://en.wikipedia.org/wiki/Do_Not_Track Sending this header may actually make Dillo MORE trackable. The attached patch removes it. Regards, Alex

2 5

[Feat. req.?]: Diacritic-sensitive search (Ctrl+Find)
by Juan M Sevilla April 13, 2026

April 13, 2026

Hi, It would be great if, as there is a case-sensitive search, there were a diacritic-sensitive option. In fact, I would expect by default that if I search for "esta", Dillo would also find "ésta". Another example would be searching for "accion" that matches both singular "acción" (with accent) and plural "acciones" (without accent). That's Spanish specific, but we may want that for any language, i.e. several diactritical marks: ` ^ ´ ¸ ¨ I don't know how hard it would be to implement, just wanted to mention it as a useful feature. As a good news, I wanted to say that, with the experimental fltk-1.4 flavor, I can use my preferred font (Atkinson Hyperlegible Next) and all absent glyphs are displayed accordingly —a bit off the line I should say, but I knew graphical glitches are to be expected. Best regards!

2 2

Released 3.3.0-rc1
by Rodrigo Arias April 12, 2026

April 12, 2026

Hi, The release candidate 3.3.0-rc1 is available here: https://dillo-browser.org/release/3.3.0-rc1/ Let me know if you encounter any issues so I can fix them before the 3.3.0 release. Best, Rodrigo.

1 0

[PATCH] Fix display of disabled options in configure.ac
by a1ex＠dismail.de March 23, 2026

March 23, 2026

Hi, There are a couple of missing variables in configure.ac which result in missing info when disabling some options via configure: Features: Cookies enabled: no XEmbed enabled : no JPEG enabled : no PNG enabled : no GIF enabled : no SVG enabled : no WEBP enabled : Brotli enabled : IPv6 enabled : no Control socket : no (experimental) We are missing variables for WEBP and Brotli. The attached patch fixes this. Regards, Alex

2 1

"Segmentation fault" after pressing a button on a website
by Juan M Sevilla March 23, 2026

March 23, 2026

Hi, while testing search engines, I found that on this particular site https://paulina.toolforge.org/, when you press the button to submit your search, Dillo crashes with the following message on the terminal: "Violación de segmento". Here are the logs I get: > Nav_open_url: new url='https://paulina.toolforge.org/' > Dns_server [0]: paulina.toolforge.org is 2a02:ec80:a000:1::2bc > 185.15.56.88 Connecting to [2a02:ec80:a000:1::2bc]:443 > paulina.toolforge.org: TLSv1.3, cipher TLS_AES_256_GCM_SHA384 > 0: ecdsa-with-SHA384 256-bit EC: /CN=toolforge.org > 1: sha256 384-bit EC: /C=US/O=Let's Encrypt/CN=E8 > root: /C=US/O=Internet Security Research Group/CN=ISRG Root X1 > NumPendingStyleSheets=1 > NumPendingStyleSheets=2 > NumPendingStyleSheets=3 > Dns_server [0]: tools-static.wmflabs.org is 2a02:ec80:a000:1::1d > 185.15.56.49 tools-static.wmflabs.org: TLSv1.3, cipher > TLS_AES_256_GCM_SHA384 0: ecdsa-with-SHA384 256-bit EC: > /CN=wmcloud.org 1: sha256 384-bit EC: /C=US/O=Let's Encrypt/CN=E8 > root: /C=US/O=Internet Security Research Group/CN=ISRG Root X1 > >>>> a_Nav_repush <<<< > Nav_open_url: new url='https://paulina.toolforge.org/' > a_Nav_expect_done: repush! > Violación de segmento It happens on both Dillo branches "master" and "match-prefix-exactly" $ dillo -v Dillo Libraries: fltk/1.3.11 jpeg/2.1.5 png/1.6.48 webp/1.5.0 zlib/1.3.1 OpenSSL/3.5.4 Features: +GIF +JPEG +PNG +SVG +WEBP -BROTLI +XEMBED +TLS +IPV6 -CTL

3 5

Preparation for Dillo 3.3.0 release
by Rodrigo Arias March 22, 2026

March 22, 2026

Hi, As most blockers for the release are now solved, I would like to start preparing the 3.3.0 release, which will be the first to include experimental support for FLTK 1.4. It must be manually enabled with the --enable-experimental-fltk configure flag and is only recommended for early testers or developers. Please, let me know if there is any patch that you have planned to get merged before the release. Best, Rodrigo.

1 0