- Dillo-dev - lists.mailman3.com

[Dillo-dev]Bug #364

by Russell J. Wood

Hello Dilldoers =b Would the said bug be because the Set-Cookie entity sent from advogato.org is not RFC compliant? Here is what I received: Set-Cookie: id=<data>; path=/; Expires=Thursday, 20-Oct-2005 11:57:18 GMT I'm under the impression the Expires attribute is meant to be as: Wdy, DD-MM-YYYY HH:MM:SS GMT Therefore, because the Weekday isn't in an abbreviated form it is being discarded? Regards, Russell

Oct. 20, 2004

Re: [Dillo-dev]Possible RPM delays

by Jorge Arellano Cid

On Mon, Oct 18, 2004 at 10:39:24PM -0700, Kelson Vibber wrote: > My main computer at home has been having problems lately. I *hope* > it's just the video card (I would expect worse problems if it were the > motherboard, CPU, or memory), but I think it's fair to warn you that if > 0.8.3 final comes out before I've resolved the issues, I might not be > able to build all the RPMs immediately. Thanks for the notice Kelson. Can it be ready for an Oct 25 or 27 release? (I still have to prepare rc3 with the fix to the redirection CPU hog. I'm hands on it today, so hopefully rc3 will be ready before Friday and after some redirection specific tests, 0.8.3 can be finally released near those dates). -- Cheers Jorge.-

Oct. 20, 2004

Re: [Dillo-dev]dillo-0.8.3-rc2 ready for download

by Jorge Arellano Cid

On Wed, Oct 20, 2004 at 12:09:38AM +0100, Jeremy Henty wrote: > > On Mon, Oct 18, 2004 at 04:15:01PM -0300, Jorge Arellano Cid wrote: > > > ... please beware and remove: > > > > /usr/local/lib/dillo/dpi/file/file.filter.dpi or > > /usr/lib/dillo/dpi/file/file.filter.dpi > > Arrgh! This breaks for me. If I don't remove this file everything > works wonderfully. If I rename it then accessing a file:... URL gives > me "ERROR: can't start dipd daemon!". This shouldn't happen... > > I am running Linux From Scratch 4.1, kernel 2.4.27 , glibc-2.3.1 , > gcc-3.2.1 , glib-1.2.10 , gtk+-1.2.10 . The file:... URL is my home > as set in dillorc, so I get the above error simply by clicking the > home button. No other changes have been made to dillorc. > > How can I investigate this further? ps aux | grep dpid Kill every old dpid that may be running. 'dpidc stop' or 'kill <pids>' ps aux | grep dpi remove any dpi server that may linger. chmod -x /usr/lib/dillo/dpi/file/file.filter.dpi Be sure the new file.dpi is in /usr/lib/dillo/dpi/file/, this happens after 'make install'. Test again. -- Cheers Jorge.-

Oct. 20, 2004

Re: [Dillo-dev]dillo-0.8.3-rc2 ready for download

by Jeremy Henty

On Mon, Oct 18, 2004 at 04:15:01PM -0300, Jorge Arellano Cid wrote: > ... please beware and remove: > > /usr/local/lib/dillo/dpi/file/file.filter.dpi or > /usr/lib/dillo/dpi/file/file.filter.dpi Arrgh! This breaks for me. If I don't remove this file everything works wonderfully. If I rename it then accessing a file:... URL gives me "ERROR: can't start dipd daemon!". I am running Linux From Scratch 4.1, kernel 2.4.27 , glibc-2.3.1 , gcc-3.2.1 , glib-1.2.10 , gtk+-1.2.10 . The file:... URL is my home as set in dillorc, so I get the above error simply by clicking the home button. No other changes have been made to dillorc. How can I investigate this further? Cheers, Jeremy

Oct. 19, 2004

Re: [Dillo-dev]Re: comment from ps2 group on 0.8.x

by Jorge Arellano Cid

On Tue, Oct 19, 2004 at 08:54:06PM +0100, robert w hall wrote: > In article <20041019201134.GC2745(a)dillo.org>, Jorge Arellano Cid > <jcid(a)dillo.org> writes > >On Tue, Oct 19, 2004 at 07:33:18PM +0100, robert w hall wrote: > >> > >> > >> > >> Jorge > >> This from playstation2 group - I've asked him to ty the rc2 version > >> and/or clarify which 0.8.x version didn't render properly > >> Bob Hall > > > > Thanks. > > > > I received this email and the former on my personal email > >address. AFAIU you're on dillo-dev so I answered there, and to be > >sure this one goes to dillo-dev and to your address. > > > > > Please use dillo-dev in the future. > > > OK - but I rather presumed there was no point in filling up the list > with 'OK' from 60 different obscure machine-types 60 different obscure machine-types? > and besides, I like anonymity :-) Me too! But that's life! :) -- Cheers Jorge.- PS: Please excuse the repeated answers. My MTA said timeout, so I resent them. There you have the results...

Oct. 19, 2004

Re: [Dillo-dev]dillo-0.8.3-rc2 ready for download

by Johannes Hofmann

Hi, compiles and runs nicely on DragonFly BSD (including file DPI). Thanks, Johannes On Mon, Oct 18, 2004 at 04:15:01PM -0300, Jorge Arellano Cid wrote: > Hi there, > > The new dillo-0.8.3-rc2 is ready for download and testing! > > It's basically the same as rc1, but with the race condition on > the file dpi solved. It also uses a dpi server instead of a dpi > filter so please beware and remove: > > /usr/local/lib/dillo/dpi/file/file.filter.dpi or > /usr/lib/dillo/dpi/file/file.filter.dpi > > Actually it can work with both, but as we want to test the dpi > server in the tarball (default) please be careful and be sure to > remove the file filter dpi to be testing the file server dpi. > > (the other change is a minor improvement on the visited link > color choosing algorithm). > > Feedback is very welcomed. After you say it's OK, it will be > officially announced as dillo-0.8.3. > > Download URL: > > http://www.dillo.org/download/dillo-0.8.3-rc2.tar.bz2 > > -- > Cheers > Jorge.- > > _______________________________________________ > Dillo-dev mailing list > Dillo-dev(a)lists.auriga.wearlab.de > http://lists.auriga.wearlab.de/cgi-bin/mailman/listinfo/dillo-dev >

Oct. 19, 2004

[Dillo-dev]Re: comment from ps2 group on 0.8.x

by Jorge Arellano Cid

On Tue, Oct 19, 2004 at 07:33:18PM +0100, robert w hall wrote: > > > > Jorge > This from playstation2 group - I've asked him to ty the rc2 version > and/or clarify which 0.8.x version didn't render properly > Bob Hall Thanks. I received this email and the former on my personal email address. AFAIU you're on dillo-dev so I answered there, and to be sure this one goes to dillo-dev and to your address. Please use dillo-dev in the future. The main problem with writing directly to me is that I end being the only one that knows what's going on! :-) (Ah, and there's also the problem of duplicate answers...) > > ________________________________________________________________________ > > Read and respond to this message at: > https://playstation2-linux.com/forum/message.php?msg_id=45864 > By: deesaid Oh, please forward this in my name to that group. > > I have a problem with 0.8.x versions in PS2: some pages that look > correct with > the older dillo (the one that's precompiled here), when I try them with > the > newer 0.8.x versions look unformatted. The simplest example is doing a > search > on google: at the search results page, in a regular browser you can see > the > google logo at the top, the search form to the right, and below the logo > and > the form, the search results. In 0.8.x versions the results page is > composed > by the Google logo at the left top and the search form at the right, but > the > results are shown just below the search form, leaving a hughe blank > margin below > the google logo. > > Is there a way to fix it? Yes, the new parser (W3C + heuristics) solves this problem. RC2 will work and so 0.8.3. -- Cheers Jorge.-

Oct. 19, 2004

Re: [Dillo-dev]dillo-0.8.3-rc2 ready for download

by Jorge Arellano Cid

On Tue, Oct 19, 2004 at 10:16:34AM +0100, robert w hall wrote: > In article <20041018191501.GM9792(a)dillo.org>, Jorge Arellano Cid > <jcid(a)dillo.org> writes > >Hi there, > > > > The new dillo-0.8.3-rc2 is ready for download and testing! > > > > It's basically the same as rc1, but with the race condition on > >the file dpi solved. It also uses a dpi server instead of a dpi > >filter so please beware and remove: > > > > /usr/local/lib/dillo/dpi/file/file.filter.dpi or > > done - :-) :-) > > [...] > > Feedback is very welcomed. After you say it's OK, it will be > >officially announced as dillo-0.8.3. > > > > Download URL: > > > > http://www.dillo.org/download/dillo-0.8.3-rc2.tar.bz2 > > > > > seems to compile OK on a playstation2 with https enabled > > dpi_parse_token gives an ERROR from open_url each time when trying to > read the filename, > before successfully executing start_send_page... > I presume this is an intended untidyness ? Yes. Before sending the dpi request to the server, a tentative connection is made to be sure it is running. If it's not, a new server is launched. Notwithstanding the untidiness exists ;), essentially it consists in giving a scary message instead of a more meaningful one. > Keep up the good work Thanks. We hope to. -- Cheers Jorge.-

Oct. 19, 2004

Re: [Dillo-dev]Re: comment from ps2 group on 0.8.x

by robert w hall

In article <20041019201134.GC2745(a)dillo.org>, Jorge Arellano Cid <jcid(a)dillo.org> writes >On Tue, Oct 19, 2004 at 07:33:18PM +0100, robert w hall wrote: >> >> >> >> Jorge >> This from playstation2 group - I've asked him to ty the rc2 version >> and/or clarify which 0.8.x version didn't render properly >> Bob Hall > > Thanks. > > I received this email and the former on my personal email >address. AFAIU you're on dillo-dev so I answered there, and to be >sure this one goes to dillo-dev and to your address. > > Please use dillo-dev in the future. OK - but I rather presumed there was no point in filling up the list with 'OK' from 60 different obscure machine-types and besides, I like anonymity :-) -- robert w hall

Oct. 19, 2004

[Dillo-dev]Re: Dillo potential DOS via redirect loop

by Jorge Arellano Cid

Hi Kelson, On Mon, Oct 18, 2004 at 04:39:34PM -0700, Kelson Vibber wrote: > I was attempting to pull up the bug database for Wordpress > <http://mosquito.wordpress.org/> in Dillo 0.8.3rc2, and noticed that the > browser froze when I clicked on the "View bugs" link. After I killed it > and re-launched it from a command line, I saw it spewing Nav_open_url > messages over and over, alternating between these two lines: > > Nav_open_url: Url=>http://mosquito.wordpress.org/view_all_bug_page.php< > Nav_open_url: Url=>http://mosquito.wordpress.org/view_all_set.php?type=0< Yes, it happens... > > I'm not entirely sure what the site is trying to do, but Firefox, Opera > and IE all seem to make it through okay. I suspect it's something like > this: > > 1. view_all_bug_page.php checks for a cookie. It doesn't find it, so it > redirects (302) to view_all_set.php?type=0 > 2. view_all_set.php sets the cookie, then sends the browser back to the > original page. > 3. Either Dillo hasn't accepted the cookie and view_all_bug_page.php > sends the redirect again, or Dillo has already cached the 302 response > and jumps to view_all_set.php anyway. > > Adding mosquito.wordpress.org to cookiesrc doesn't make a difference. Currently Dillo's cache is handling HTTP 30x answers as cacheable redirections. This is more a lack of implementation than a BUG (there's no code to handle 302 answers now). > > Based on the libwww-perl HEAD utility (which breaks out of the loop > after 7 redirects) and just telnetting to port 80, I've found the following: > > - They're using a 302 (temporary) redirect on both scripts > - They're setting a cookie on view_all_set.php. > - They're using relative URLs in the Location header (which I think is > technically not allowed, but has been used in practice for years.) Dillo handles relative locations. > Regardless of whether this setup is valid, it *does* make Dillo stop > responding. There is at least one bug here -- Dillo isn't detecting the > redirect loop and breaking out of it -- and possibly two (if it's > caching the 302/temporary status). Yes, there're two problems. Dillo hogging the CPU is a BUG that'd be better fixed for 0.8.3. The caching problem is a large issue that needs much more time to tackle. The cache problem is very interesting: if a browser happens to follow the SPEC, it becomes easy to abuse (e.g. pragma: no-cache advertising). OTOH, some sites can require to refresh some page contents in order to keep some meaningful state (HTTPS services usually use cache directives). Maybe as it happens with cookies, just allowing certain cites and honoring HTTP cache directives from that set only, is a good solution in the long term. I'll try to find a way to catch the redirection loop hog... -- Cheers Jorge.-

Oct. 19, 2004