- Dillo-dev - lists.mailman3.com

link element is conditionally allowed in body
by Andrea Pappacoda Sept. 14, 2026

Sept. 14, 2026

Hi again :) I noticed another incorrect warning from the bug meter, triggered by https://hackinpovo.it, this time saying: This <link> element must be inside the HEAD section. Which is not true. Citing the HTML spec. From both <https://html.spec.whatwg.org/review-drafts/2020-01/#allowed-in-the-body> and <https://html.spec.whatwg.org/dev/semantics.html#allowed-in-the-body>, > If a link element has an itemprop attribute, or has a rel attribute > that contains only keywords that are body-ok, then the element is said > to be allowed in the body. From both <https://html.spec.whatwg.org/review-drafts/2020-01/#body-ok> and <https://html.spec.whatwg.org/dev/links.html#body-ok>, > The body-ok keywords are dns-prefetch, modulepreload, pingback, > preconnect, prefetch, preload, and stylesheet. Not ideal, I agree, but that's what it says :/

1 0

Bogus "required DOCTYPE declaration is missing" in XHTML
by Andrea Pappacoda Sept. 14, 2026

Sept. 14, 2026

Hi! I just noticed that my website, andrea.pappacoda.it, triggers a warning from the bug meter: HTML warning: line 1, The required DOCTYPE declaration is missing. Handling as HTML4. My website though is an XHTML page, served with the application/xhtml+xml media type, and thus requires no DOCTYPE, which is only required in the "HTML syntax" of HTML. See: - https://html.spec.whatwg.org/dev/xhtml.html#the-xhtml-syntax - https://html.spec.whatwg.org/dev/syntax.html#syntax I couldn't find a way to add this to the bug tracker, so I'm sending it here. Please keep me Cc'd as I'm not subscribed :) Bye!

1 0

[PATCH] Prevent DilloPlain::write() from reading past end of buffer
by 256＠256-32.com Sept. 10, 2026

Sept. 10, 2026

In src/plain.cc, \r\n sequences are handled with these lines: while ( i < MaxBytes ) { ... addLine(Start + i - len, len); if (Start[i] == '\r' && Start[i + 1] == '\n') ++i; if (i < MaxBytes) ++i; ... So if a \r occurs, skip over the \n if present. But if i + 1 == MaxBytes, Start[i + 1] is one past the end of the buffer, which is an out-of-bounds read. This happens if a file ends in \r, or I suppose if a file gets broken up and parsed with multiple invocations of the function. I think this could theoretically add a redundant line break to the rendered page. My diff fixes this. I have tested it with \r, \r\n, and \n line endings. I haven't been able to test how it behaves with plaintext pages that are parsed in multiple invocations, though. (Also, and this is unrelated but it bothers me: prefsparser.cc has a comment saying the `symbols` array is sorted, but it isn't.) diff --git a/src/plain.cc b/src/plain.cc index 0f5d6a48..e085ab19 100644 --- a/src/plain.cc +++ b/src/plain.cc @@ -142,7 +142,10 @@ void DilloPlain::addLine(char *Buf, uint_t BufSize) { int len; char buf[129]; - char *end = Buf + BufSize; + char *end; + + if (BufSize > 0 && Buf[BufSize - 1] == '\r') --BufSize; + end = Buf + BufSize; currentLine++; /* Start at 1 */ sprintf(buf, "L%ld", currentLine); /* Always fits */ @@ -181,7 +184,8 @@ void DilloPlain::write(void *Buf, uint_t BufSize, int Eof) while ( i < MaxBytes ) { switch ( state ) { case ST_SeekingEol: - if (Start[i] == '\n' || Start[i] == '\r') + if (Start[i] == '\n' || (Start[i] == '\r' && i + 1 < MaxBytes + && Start[i + 1] != '\n')) state = ST_Eol; else { ++i; ++len; @@ -189,8 +193,7 @@ void DilloPlain::write(void *Buf, uint_t BufSize, int Eof) break; case ST_Eol: addLine(Start + i - len, len); - if (Start[i] == '\r' && Start[i + 1] == '\n') ++i; - if (i < MaxBytes) ++i; + ++i; state = ST_SeekingEol; len = 0; break;

1 0

[PATCH] Fix build on GNU/hurd via dynamic allocation
by João Pedro Malhado Sept. 1, 2026

Sept. 1, 2026

Dear Dillo Maintainers, I noticed that the Dillo 3.3.0 Debian package build was failing on GNU/hurd due to the PATH_MAX macro not being defined on that platform. This is a common portability issue on the platform, and the following page indicates why the macro is not defined in GNU/hurd https://www.gnu.org/software/hurd/faq/foo_max It was pointed out to me that commit b43ab26e81a1e399e3cb148b972a284518aa4d39 has addressed the hurd build failure already, but it does so by simply defining PATH_MAX to an arbitrary value. As per the page above, the preferred way to address the issue by allocating the size of the path dynamically. I submit the following patch to your consideration. The patch applies to version 3.3.0 of the file present in Debian, before the above mentioned commit. Best regards, João

2 3

Support <dialog>, at least at the level of recognizing in CSS
by Artyom Bologov Aug. 31, 2026

Aug. 31, 2026

Hi y’all, I realize that supporting some elements, like <dialog>, is out of scope for Dillo. However, it would be nice to recognize these elements, at least in stylesheets, so that I can at least do dialog { display: none; } Right now, the dialog is just displayed unconditionally, because, it seems, such a style rule does not apply to it. Check https://aartaka.me for an example of such dialog not hiding. So, is this it fixable? Thanks, -- Artyom Bologov https://aartaka.me

2 2

[PATCH 0/2] Fix crashes seen on subpages of https://www.pythontutorial.net/
by Andreas Kemnade Aug. 29, 2026

Aug. 29, 2026

There are input type="button" without value there, do not crash. The main repo seems not to have a pull request functionality, so I am using the good old git format-patch way, so it can be applied via git am. Andreas Kemnade (2): do not crash at input tags which do neither produce resources or embeds form input: try to find defaults for buttons without a value src/form.cc | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) -- 2.47.3

2 3

[PATCH] Minor wording change in doc/user_help
by Nikolas Nyby Aug. 11, 2026

Aug. 11, 2026

--- doc/user_help.in.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/user_help.in.html b/doc/user_help.in.html index 9f0ca589..f1fd26c9 100644 --- a/doc/user_help.in.html +++ b/doc/user_help.in.html @@ -154,7 +154,7 @@ or copying text. The graphical interface is designed to be used with a mouse or pointing device. At the top of the browser window you have the location bar and the main -buttons to control the browser. You can leave the mouse for a brief moment over +buttons to control the browser. You can hover the cursor for a brief moment over any part of the menu to show a tooltip with more information. Dillo has context sensitive menus, which are opened with the right mouse -- 2.53.0

2 2

[PATCH] Update manpage with HTTPS note
by Nikolas Nyby Aug. 11, 2026

Aug. 11, 2026

It seems that HTTPS/TLS support is no longer experimental in dillo. --- doc/dillo.1.in | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/doc/dillo.1.in b/doc/dillo.1.in index 411305f6..f53c4c20 100644 --- a/doc/dillo.1.in +++ b/doc/dillo.1.in @@ -1,4 +1,4 @@ -.TH dillo 1 "May 28, 2015" "" "USER COMMANDS" +.TH dillo 1 "August 11, 2026" "" "USER COMMANDS" .SH NAME dillo \- web browser .SH SYNOPSIS @@ -9,10 +9,9 @@ dillo \- web browser .SH DESCRIPTION .PP Dillo is a lightweight graphical web browser that aims to be secure. -It handles HTTP internally, and FILE, FTP, and -DATA URIs are handled through a plugin system (dpi). In addition, -.I EXPERIMENTAL -HTTPS support can be enabled. Both FTP and Dillo's download manager use the +It handles HTTP/HTTPS internally, and FILE, FTP, and +DATA URIs are handled through a plugin system (dpi). Both FTP and +Dillo's download manager use the .BR wget (1) downloader. .PP -- 2.53.0

2 1

Debian package (bugs 216, 305)
by Nikolas Nyby Aug. 6, 2026

Aug. 6, 2026

Hello, The following bugs can be closed now that I have released a Dillo 3.3.0 package in Debian: * https://bug.dillo-browser.org/216/ * https://bug.dillo-browser.org/305/ See: https://tracker.debian.org/pkg/dillo This new version will be in Debian testing in a few days.

2 1

Error when opening local html file
by Nikolas Nyby July 13, 2026

July 13, 2026

Hello, I couldn't find a bug log for this already, or maybe I am doing something wrong. On current git master, I add this to the address bar: file:///home/nik/Documents/margin-test.html The file fails to load. Also, when using the menu: File -> Open File... dialog, which inserts this into the address bar: file:/home/nik/Documents/margin-test.html and displays the error: ERROR: can't start dpid daemon (URL scheme = 'file')!

2 2