- Dillo-dev - lists.mailman3.com

dillo-dev mailing list
by jcid＠dillo.org Oct. 17, 2008

Oct. 17, 2008

Hi, If you have subscribed to dillo-dev, and can't get into it, please send me an email (with enough dillo project related keywords so the filter treats you well!), to enable you by hand. -- Cheers Jorge.-

1 0

[patch]: improve the "SSL disabled" warnings.
by onepoint＠starurchin.org Oct. 17, 2008

Oct. 17, 2008

This is a purely cosmetic update to my previous patch: it adds a warning about alpha code to the output of "./configure --help" and improves the appearance of the "SSL is disabled" message from the plugin. It does not change any functionality. Regards, Jeremy Henty

2 1

user charset selection
by corvid＠lavabit.com Oct. 17, 2008

Oct. 17, 2008

I see that someone in bugtracker asked for a charset selection dialog. In my early charset code, I had a dialog where the initial text was, for example, "text/html; charset=UTF-8". If I remember correctly, Jorge did not really like this because the percentage of users who would know what to type when confronted with this dialog is small. Probably true. (In part I liked it because text/plain provided page source for free.) An alternative would be a menu with predefined charsets, but filling dillo with charset names does not delight me.

1 0

[patch]: enable the "--enable-ssl" configure flag
by onepoint＠starurchin.org Oct. 16, 2008

Oct. 16, 2008

It seems a little silly to implement a configure flag in configure.in to define ENABLE_SSL , only for dpi/https.c to ignore it! This patch: * changes --disable-ssl to --enable-ssl * changes dpi/https.c to respect --enable-ssl The default is to disable SSL. The configure script will issue a stern warning about alpha code if --enable-ssl is used. The DPI warning when SSL is disabled has been changed to explain about --enable-ssl . Regards, Jeremy Henty

2 2

[patch] fltkviewbase cleanup
by Johannes.Hofmann＠gmx.de Oct. 16, 2008

Oct. 16, 2008

Hi, attached patch garbage collects some unused code and renames one of the drawRectangle() methods to just draw(). Both drawRectangle() methods were doing completly different things. Cheers, Johannes

2 1

cross-site request forgery
by corvid＠lavabit.com Oct. 15, 2008

Oct. 15, 2008

I wrote some code because I said I was going to write some code, but it turns out that I dislike cookies and advertisements too much to give it any decent testing. If anybody ever wants to play with it, though, here it is: http://www.dillo.org/test/csrf-20081015.patch requests not made by user: 1) Cache_redirect() calling a_Nav_push with the URL from the Location HTTP header, which calls Nav_open_url, which can stuff the requesting URL into the Web structure. 2) a_Html_add_new_image() for automatically-loaded images, calling Html_load_image(), which can stuff the requesting URL into the Web structure. Http_send_query() gets the requesting URL from the Web structure and passes it to a_Http_make_query_str(), which calls a_Cookies_get_query. If cookiesrc shows that the requesting URL is not trusted with cookies, I decided to deny it. Otherwise, the URL is sent off with the request to the cookies dpi. In the dpi, the arguments find their way to Cookies_get and then Cookies_requester_authorized(), which tries to decide whether it wants to send a particular cookie on behalf of the requester.

1 0

[patch]: Ignore the "HttpOnly" cookie attribute
by onepoint＠starurchin.org Oct. 15, 2008

Oct. 15, 2008

I submitted this before, but it vanished without comment. The Wikipedia login sets a cookie with an "HttpOnly" attribute, which Dillo rejects. This means that vanilla Dillo cannot login to Wikipedia. This patch fixes this by silently ignoring the attribute. See the dillo-dev discussion at http://lists.auriga.wearlab.de/pipermail/dillo-dev/2008-October/005042.html Regards, Jeremy Henty

2 1

dillo-2.0 is released!
by jcid＠dillo.org Oct. 15, 2008

Oct. 15, 2008

Hi, The freshmeat submission was made (waiting for review), the web site is updated (AFAIS), we have some packages too. Great! I want to thank all the people that made it possible. Wheeeeeeee! -- Cheers Jorge.-

7 9

[rjn@moxtrait.com: 2.0]
by jcid＠dillo.org Oct. 15, 2008

Oct. 15, 2008

Enjoy! -- Cheers Jorge.-

1 0

Donations www-page
by fgeek＠hack.fi Oct. 15, 2008

Oct. 15, 2008

Someone should update http://www.dillo.org/donations.html - Henri

1 0