- Dillo-dev - lists.mailman3.com

issues & suggestions
by corvid＠lavabit.com Oct. 19, 2008

Oct. 19, 2008

Tomas wrote: > On Sun, Oct 19, 2008 at 01:16:45AM +0000, corvid wrote: > > Tomas wrote: > > > 1) When trying to login to gmail I get a big ugly warning saying: "Non > > > standard meta refresh tag". The "here" link doesn't work. gmail basic > > > html view works ok with links-hacked & elinks. So, I guess, that > > > shouldn't be hard to fix. > > > > If I enable cookies for mail.google.com and enable https, > > the "here" link gets me to a login screen. > > > > So if I understand correctly, you go to gmail, try to login, get the "non standard meta refresh tag. The author wanted you to go here" > message, click on "here" and you are back to square one - login paga? Is that correct? If that's the case, it's a bug anyway. In my > case, even I have cookies & https enabled, clicking on "here" link doesn't do anything. Ah, maybe these are different "here" links. I meant one that went from gmail.com to mail.google.com. I don't have an account, so I don't know anything past the login screen. Hmm. Today I'm not getting any gmail.com->mail.google.com meta refresh. It's redirecting to the login screen using the Location header. cookies.txt is empty, cookiesrc disables everything, and the cookies dpi is not running. (Yesterday, clicking on the meta refresh link would get hung up in redirections, so I had to allow cookies)

2 1

Dillo Packages
by jcid＠dillo.org Oct. 19, 2008

Oct. 19, 2008

Hi, I'd like to have packages for Debian and some RPMs. Kelson already committed himself with the RPMs, and although I can make i32 and i64 Debian packages, I'm a newbie on it. Volunteers? -- Cheers Jorge.-

4 7

enabling frames
by itsme_410＠yahoo.com Oct. 18, 2008

Oct. 18, 2008

Hi, It is good to see the new dillo2. Thanks very much!! Is there any proposal to allow frames in dillo in the near future? Sites such as www.washingtonpost.com end up almost unreadable without frames. Many thanks again and best wishes, Trotter __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

LWN headline on Dillo-2.0 release
by jcid＠dillo.org Oct. 17, 2008

Oct. 17, 2008

Hi there, LWN, has a headline with dillo-2.0 release. This is very good for passing the word. Unfortunately the first (and only) comment is quite misleading in the sense of usability. Can somebody please answer that? http://lwn.net/Articles/303502/ -- Cheers Jorge.-

3 5

dillo-dev mailing list
by jcid＠dillo.org Oct. 17, 2008

Oct. 17, 2008

Hi, If you have subscribed to dillo-dev, and can't get into it, please send me an email (with enough dillo project related keywords so the filter treats you well!), to enable you by hand. -- Cheers Jorge.-

1 0

[patch]: improve the "SSL disabled" warnings.
by onepoint＠starurchin.org Oct. 17, 2008

Oct. 17, 2008

This is a purely cosmetic update to my previous patch: it adds a warning about alpha code to the output of "./configure --help" and improves the appearance of the "SSL is disabled" message from the plugin. It does not change any functionality. Regards, Jeremy Henty

2 1

user charset selection
by corvid＠lavabit.com Oct. 17, 2008

Oct. 17, 2008

I see that someone in bugtracker asked for a charset selection dialog. In my early charset code, I had a dialog where the initial text was, for example, "text/html; charset=UTF-8". If I remember correctly, Jorge did not really like this because the percentage of users who would know what to type when confronted with this dialog is small. Probably true. (In part I liked it because text/plain provided page source for free.) An alternative would be a menu with predefined charsets, but filling dillo with charset names does not delight me.

1 0

[patch]: enable the "--enable-ssl" configure flag
by onepoint＠starurchin.org Oct. 16, 2008

Oct. 16, 2008

It seems a little silly to implement a configure flag in configure.in to define ENABLE_SSL , only for dpi/https.c to ignore it! This patch: * changes --disable-ssl to --enable-ssl * changes dpi/https.c to respect --enable-ssl The default is to disable SSL. The configure script will issue a stern warning about alpha code if --enable-ssl is used. The DPI warning when SSL is disabled has been changed to explain about --enable-ssl . Regards, Jeremy Henty

2 2

[patch] fltkviewbase cleanup
by Johannes.Hofmann＠gmx.de Oct. 16, 2008

Oct. 16, 2008

Hi, attached patch garbage collects some unused code and renames one of the drawRectangle() methods to just draw(). Both drawRectangle() methods were doing completly different things. Cheers, Johannes

2 1

cross-site request forgery
by corvid＠lavabit.com Oct. 15, 2008

Oct. 15, 2008

I wrote some code because I said I was going to write some code, but it turns out that I dislike cookies and advertisements too much to give it any decent testing. If anybody ever wants to play with it, though, here it is: http://www.dillo.org/test/csrf-20081015.patch requests not made by user: 1) Cache_redirect() calling a_Nav_push with the URL from the Location HTTP header, which calls Nav_open_url, which can stuff the requesting URL into the Web structure. 2) a_Html_add_new_image() for automatically-loaded images, calling Html_load_image(), which can stuff the requesting URL into the Web structure. Http_send_query() gets the requesting URL from the Web structure and passes it to a_Http_make_query_str(), which calls a_Cookies_get_query. If cookiesrc shows that the requesting URL is not trusted with cookies, I decided to deny it. Otherwise, the URL is sent off with the request to the cookies dpi. In the dpi, the arguments find their way to Cookies_get and then Cookies_requester_authorized(), which tries to decide whether it wants to send a particular cookie on behalf of the requester.

1 0