- Dillo-dev - lists.mailman3.com

Here's 3.0.5 RC1

by sgeerken＠dillo.org

Should have gone to the list ... On Mi, Jun 17, 2015, eocene wrote: > In my use of the 3.0.5 branch, there haven't been any unpleasant surprises, > so let's have an RC: > > http://www.dillo.org/download/dillo-3.0.5-rc1.tar.bz2 Works without problems. > If it's any comfort to have the sha256sum, it's: > 484748e98b263ccd595ce349857edec4a431feb414e44cdbe86722a64387d000 Correct! Sebastian

June 17, 2015

Here's 3.0.5 RC1

by eocene＠gmx.com

In my use of the 3.0.5 branch, there haven't been any unpleasant surprises, so let's have an RC: http://www.dillo.org/download/dillo-3.0.5-rc1.tar.bz2 If it's any comfort to have the sha256sum, it's: 484748e98b263ccd595ce349857edec4a431feb414e44cdbe86722a64387d000

June 17, 2015

splash links

by eocene＠gmx.com

Jorge wrote: > On Mon, Jun 15, 2015 at 04:33:03PM +0000, eocene wrote: > > 2. In my opinion, it wouldn't do any harm to remove the "News", "Additional > > Stuff", and "Essential Readings" links, as they have something of an > > Internet Circa 2002 flavor (in some ways it's a shame to think how > > pioneering projects like Project Gutenberg lose their preeminence as the > > pioneer days end, but I suppose that's the way of things). > > In my opinion those links are very important, and want to keep them > there. It later occurred to me that maybe the most accurate thing would be to label them as Jorge's Links, whereas they currently would be understood by a user to be the Dillo core team's links, which they aren't.

June 15, 2015

splash links

by jcid＠dillo.org

On Mon, Jun 15, 2015 at 04:33:03PM +0000, eocene wrote: > > 1. freecode. Between the fact that the site's been in suspended animation > for a year and there's been all of this sourceforge unpleasantness just > lately, it would be nice not to link to them. OK. > > 2. In my opinion, it wouldn't do any harm to remove the "News", "Additional > Stuff", and "Essential Readings" links, as they have something of an > Internet Circa 2002 flavor (in some ways it's a shame to think how > pioneering projects like Project Gutenberg lose their preeminence as the > pioneer days end, but I suppose that's the way of things). In my opinion those links are very important, and want to keep them there. > PS Been running on the 3.0.5 branch here, of course, and everything's been > fine so far. Good. -- Cheers Jorge.-

June 15, 2015

splash links

by eocene＠gmx.com

1. freecode. Between the fact that the site's been in suspended animation for a year and there's been all of this sourceforge unpleasantness just lately, it would be nice not to link to them. 2. In my opinion, it wouldn't do any harm to remove the "News", "Additional Stuff", and "Essential Readings" links, as they have something of an Internet Circa 2002 flavor (in some ways it's a shame to think how pioneering projects like Project Gutenberg lose their preeminence as the pioneer days end, but I suppose that's the way of things). PS Been running on the 3.0.5 branch here, of course, and everything's been fine so far.

June 15, 2015

how about if we make a 3.0.5

by eocene＠gmx.com

I wrote: > noname wrote: > > SSL3 and compression are not the main issue. > > HTTPS in dillo is completely broken because it does not check for domain > > name in the certificate. > > hg tip has checking code copied from wget and current dillo release has > > no code for it at all. It means that Dillo accepts any valid certificate > > as a certificate for, let's say, gmail. You can get one from StartSSL > > for free and test, it works. > > Right, I hadn't wanted to do any real New Work for 3.0.5 that would require > a somewhat higher level of scrutiny and testing, but all right, I'll take > a look at gluing that stuff into the https dpi. Adapted the name checking to fit into the dpi, plus server name indication while I was at it. Looks like it may be working. I'll push the code to the server later if you can promise to help give it heavy testing in coming days. When you're browsing, if you just change http to https, so many sites that don't expect TLS connections will offer up certificates that are broken in some way. And then try the various cancel/continue combinations...

June 12, 2015

how about if we make a 3.0.5

by eocene＠gmx.com

noname wrote: > SSL3 and compression are not the main issue. > HTTPS in dillo is completely broken because it does not check for domain > name in the certificate. > hg tip has checking code copied from wget and current dillo release has > no code for it at all. It means that Dillo accepts any valid certificate > as a certificate for, let's say, gmail. You can get one from StartSSL > for free and test, it works. Right, I hadn't wanted to do any real New Work for 3.0.5 that would require a somewhat higher level of scrutiny and testing, but all right, I'll take a look at gluing that stuff into the https dpi.

June 12, 2015

how about if we make a 3.0.5

by noname＠inventati.org

On Tue, Jun 09, 2015 at 02:50:30PM +0000, eocene wrote: > > It would be nice to put out some new stuff. > > Primary motivations: > > 1. placeholder attributes for textarea/input are everywhere, and often > they have no other explanation of their purpose. Having to guess > "this is probably for search, this is probably for username, this > is probably for password" is no fun. > 2. I know there are users just trusting dillo's https, so at the > least it would be good for their https dpis to have a better > cipher list and to disable SSL3 and compression. SSL3 and compression are not the main issue. HTTPS in dillo is completely broken because it does not check for domain name in the certificate. hg tip has checking code copied from wget and current dillo release has no code for it at all. It means that Dillo accepts any valid certificate as a certificate for, let's say, gmail. You can get one from StartSSL for free and test, it works.

June 12, 2015

[jcid@dillo.org: Re: how about if we make a 3.0.5]

by eocene＠gmx.com

Jorge wrote: > Good! This list looks quite safe to me. > > Feel free to ask if you find more patches thay may be included. Just now I was adding in: 1. Image buffer/cache improvements. 2. that which I found myself missing during use yesterday: a. Better notification when user's domainrc settings block page redirection. b. a bunch of assorted BUG_MSG/MSG changes made over the course of the past year. Looking at page bugs now for pages, I find myself sort of wanting my character reference changes, but...I have to draw the line somewhere. Although we have been running on it for a year... I don't know. Thoughts: - I guess it's a good sign that we're making some sort of progress if I miss having various changes. - My perception while using this prospective 3.0.5 yesterday was that it feels good, it feels speedy. Oh, one more thing: Does "Add break option after <img>" have something to do with floats, or can/should it go in as well?

June 12, 2015

[jcid@dillo.org: Re: how about if we make a 3.0.5]

by jcid＠dillo.org

On Thu, Jun 11, 2015 at 10:02:37PM +0000, eocene wrote: > Jorge wrote: > > On Thu, Jun 11, 2015 at 03:46:57PM +0000, eocene wrote: > > > I wrote: > > > > > > > > It would be nice to put out some new stuff. > > > > > > [snip] > > > > > > Been experimenting with a 3.0.5 branch (hg graft). > > > > > > Jorge: Do you think it would be a good idea to pull in your image changes > > > as well? We've been running on them for a long time and I imagine they > > > wouldn't be entangled to any great degree with anything else. > > > > Certainly. > > > > FWIW, I'm not comfortable with pushing a release yet because lots of sites > > render "better" (more readable) with the old version (be it because of float > > positioning or CSS colors). > > > > It's also true that a lot of time has passed since our last release, so > > if you can get some win-win features of the new branch and merge them into > > a better-than-the-former release, that we can confidently handle to our > > users, it may be worth the effort. > > Yeah, I'm staying away from float, grows, http, and tls for this. > I started with the last changeset in the 3.0.4.1 branch and added the > following: > > user: corvid > date: Thu Jun 11 15:20:02 2015 +0000 > summary: now give it a version number > > user: Sebastian Geerken > date: Sat Jul 12 15:27:37 2014 +0200 > summary: Tests are now linked to libX11 when needed. > > user: corvid > date: Wed Jul 23 19:02:56 2014 +0000 > summary: clarify situation with MENU element > > user: corvid > date: Wed Oct 08 15:27:10 2014 +0000 > summary: more compact MSG > > user: corvid > date: Wed Oct 22 01:29:46 2014 +0000 > summary: trim the publicsuffix TLDs yet again > > user: corvid > date: Fri Jul 18 19:34:35 2014 +0000 > summary: TODO > > user: corvid > date: Thu Jun 11 02:20:55 2015 +0000 > summary: 3.0.5 splash > > user: corvid > date: Wed Jun 10 22:22:11 2015 +0000 > summary: ChangeLog > > user: corvid > date: Wed Jun 10 22:08:12 2015 +0000 > summary: https rm RC4 from cipher list > > user: corvid > date: Sun May 31 02:17:35 2015 +0000 > summary: rm MSG > > user: corvid > date: Thu May 28 21:15:21 2015 +0000 > summary: libpng 1.6 series works for me > > user: Jorge Arellano Cid > date: Wed May 27 11:07:04 2015 -0300 > summary: Made view-source dpi use CSS formatting (it's shorter and cleaner) > > user: Jorge Arellano Cid > date: Tue May 26 11:29:21 2015 -0300 > summary: Fix view-source dpi to handle null characters correctly > > user: corvid > date: Sat May 16 17:28:24 2015 +0000 > summary: dillorc: search urls duckduckgo and startpage always redirect to https, so just specify https > > user: corvid > date: Sat May 09 15:24:53 2015 +0000 > summary: splash: urge users to read help. mention domainrc. > > user: corvid > date: Sat May 09 07:10:21 2015 +0000 > summary: keys: add Menu key > > user: corvid > date: Sat May 09 02:54:15 2015 +0000 > summary: fix font-size:(larger|smaller) > > user: corvid > date: Sun Apr 12 17:35:43 2015 +0000 > summary: more html5 doctype strings > > user: corvid > date: Fri Apr 03 19:24:10 2015 +0000 > summary: html5 (and css3) permit gr[ae]y in color names > > user: Johannes Hofmann > date: Sun Mar 08 20:05:21 2015 +0100 > summary: fix leak introduced in bbd25bf5 > > user: Johannes Hofmann > date: Fri Jul 25 22:48:32 2014 +0200 > summary: avoid requesting background images if an ancestor has display:none > > user: Johannes Hofmann > date: Tue Jan 06 21:29:27 2015 +0100 > summary: disable drag and drop > > user: Johannes Hofmann > date: Sun Feb 15 19:27:04 2015 +0100 > summary: use new count field to override default search url > > user: Johannes Hofmann > date: Sun Feb 15 19:20:21 2015 +0100 > summary: add count field in PrefsParser SymNode_t > > user: Johannes Hofmann > date: Sun Feb 15 19:17:51 2015 +0100 > summary: use single symbols table in PrefsParser::parse() > > user: corvid > date: Tue Feb 03 01:06:26 2015 +0000 > summary: for input placeholder, set position to beginning in case it's too long to show all at once > > user: corvid > date: Mon Feb 02 22:23:45 2015 +0000 > summary: TEXTAREA placeholder attribute > > user: corvid > date: Sat Jan 24 00:21:18 2015 +0000 > summary: input init usual_color > > user: Jorge Arellano Cid > date: Thu Jan 22 12:59:41 2015 -0300 > summary: Fix for segfault when there's no dpid and view source is requested. > > user: corvid > date: Thu Jan 22 08:51:02 2015 +0000 > summary: INPUT placeholder attribute > > user: corvid > date: Fri Jan 16 02:59:01 2015 +0000 > summary: don't inheritBackgroundColor for html5 sectioning stuff > > user: corvid > date: Fri Oct 17 01:36:00 2014 +0000 > summary: everyone's finally disabling SSL3; let's do so too > > user: corvid > date: Wed Sep 24 23:11:07 2014 +0000 > summary: handle irix's version of vsnprintf() > > user: corvid > date: Tue Sep 16 00:21:49 2014 +0000 > summary: url positioning in location bar > > user: corvid > date: Wed Sep 03 22:17:07 2014 +0000 > summary: a couple of quick https improvements > > user: Johannes Hofmann > date: Thu Aug 14 19:45:53 2014 +0200 > summary: improve lang and xml:lang attribute parsing > > user: corvid > date: Tue Aug 05 20:50:31 2014 +0000 > summary: html5 doctype, whitespace permitted between "html" and '>' > > user: corvid > date: Sat Aug 02 05:14:24 2014 +0000 > summary: fix the icon name fix > > user: corvid > date: Tue Jul 29 21:54:09 2014 +0000 > summary: fix icon name > > user: corvid > date: Fri Jul 18 18:53:28 2014 +0000 > summary: dillorc consistency > > user: corvid > date: Sun Jul 13 15:54:20 2014 +0000 > summary: let's not mention ipaq anymore > > user: Johannes Hofmann > date: Tue Jun 03 21:15:10 2014 +0200 > summary: change fltk-config test to be more crosscompile/buildroot friendly > > user: corvid > date: Tue Apr 15 21:49:30 2014 +0000 > summary: startpage in search urls > > parent: 3997:04d67ca748ba > user: corvid > date: Thu Apr 10 00:23:00 2014 +0000 > summary: user_help fix character reference Good! This list looks quite safe to me. Feel free to ask if you find more patches thay may be included. -- Cheers Jorge.-

June 12, 2015