Thank you Rodrigo for the pgp/signing info - i have now installed the dillo-3.1.0 and it installed and runs fine On Mon, 27 May 2024 22:41:16 +0200 Rodrigo Arias <rodarima@gmail.com> wrote:

Hi,

On Mon, May 27, 2024 at 12:52:12PM -0600, pastebin@gmx.com wrote:

...

Hello dillo-dev mailing list,

i was able to successfully import into sylpheed what appears to be a complete mbox of the old original dillo.org mailing list and the new mailman3.com mailing list - (thank you very much for this work and setting up the new mailman3.com mailing list)

If you happen to have an old archive I would like to get a copy, as there are some segments of time with missing attachments or other problems. I tried to put it together as best as I could from the copies I could get from the web. You can upload it to archive.org to avoid sending large files to the ML.

i have saved 140 emails from 2019-2022 in (2) tar.bz2 files (total 780K) your archive seems to be missing my posts :) which are in these as well i would have no idea about sending them to the archive.org but what about sending them to you directly rather then through the mailing list? they are in indivdual files just tarred up sylpheed folder dirs not in mbox format

...

i have reposted my 5/11/24 post to the old (dead) dillo.org mailing list to this list

i am glad to see dillo being reborn - it is my main http/https browser (i use w3m and curl and seamonkey as needed)

Glad to see Dillo is still being used :-)

...

---

To: dillo-dev@dillo.org Subject: dillo-3.1.0 Date: Sat, 11 May 2024 16:00:22 -0600

Hi

i just saw this on slashdot https://tech.slashdot.org/story/24/05/11/1348216/lightweight-dillo-browser-r...

and downloaded dillo-3.1.0.tar.bz2 from (https://github.com/dillo-browser/dillo/releases/download/v3.1.0/dillo-3.1.0....) configure --enable-ssl --disable-ipv6 (--enable-ssl from dillo-3.0.5 is deprecated in dillo-3.1.0) (

The --enable-ssl flag is renamed to --enable-tls and is now enabled by default.

...

checking FLTK 1.3... yes checking for libpng version... 1.6.37 configure: Using OpenSSL as TLS library. checking for pthread_create in -lpthread... yes

make good make install didn't do

but because of many known questions of github vulnerability problems (i no longer get any source from github - except this one time)

You don't need to trust GitHub, both the tarball and the release tag are signed with my GPG key:

% gpg --keyserver keys.openpgp.org --recv-keys 32E65EC501A1B6FDF8190D293EE6BA977EB2A253 gpg: key 3EE6BA977EB2A253: "Rodrigo Arias Mallo <rodarima@gmail.com>" 1 new signature gpg: Total number processed: 1 gpg: new signatures: 1

% gpg --verify dillo-3.1.0.tar.gz.asc dillo-3.1.0.tar.gz gpg: Signature made 2024-05-04T22:12:49 CEST gpg: using RSA key 32E65EC501A1B6FDF8190D293EE6BA977EB2A253 gpg: Good signature from "Rodrigo Arias Mallo <rodarima@gmail.com>" [ultimate]

% git tag -v v3.1.0 object 995ed3bd934484df7cfc437324f1eea2202d179b type commit tag v3.1.0 tagger Rodrigo Arias Mallo <rodarima@gmail.com> 1714853597 +0200

Release version 3.1.0 gpg: Signature made 2024-05-04T22:13:25 CEST gpg: using RSA key 32E65EC501A1B6FDF8190D293EE6BA977EB2A253 gpg: issuer "rodarima@gmail.com" gpg: Good signature from "Rodrigo Arias Mallo <rodarima@gmail.com>" [ultimate]

GitHub has not had the chance to write anything to the repository silently. Changes are merged from the command line using git, as I don't trust the web PR merge button.

...

i didn't install it or run it until i can go over the code myself or someone also does a security check of the source code (added 5/27/24 this is only a reflection on the github problems and not on anyone coding dillo)

If you find any issues, please report them here so we can fix them. I tried my best to improve Dillo, but I may have also accidentally introduced new bugs (as with any piece of software).

my only problems with 3.0.5 where changes in the size of 'dialog' popups that affected other popup sizes (i will be more specific when they next occur) there appears to be one 'size' that applies to all popups? am i correct? if they occur with the dillo-3.1.0 i will report what i find

Keep in mind that running the configure itself is dangerous if you don't trust the source.

I've been compiling source since early red hat and it never dawned on me that running ./configure is as dangerouse as hacked source itself - if the source is not trusted then neither is the ./configure - thanks for straightening me out on a decade old basic false assumption i've had (YIKES!)

If you don't trust doing `make install` as root, you can use the --prefix=/foo/bar flag to install Dillo in a path were your user can write (instead of /usr/local), then you don't need root to install it. You will only need to `export PATH=$PATH:/boo/bar/bin` to get the Dillo binaries in your PATH.

...

i have done my own dillo-3.1 from dillo-3.0.5

Do you mean you have some patches of your own? It would be nice if you can share them if that is the case.

My changes from 3.0.5 to my 3.1 are largely cosmetic prefernces (local loading of help file vs getting it over the web when click '?' and adding duckduck to primary search choice when click 'magnifying glass' and changing position of dialog buttons i will post them in case someone else wants them -

...

i will also wait to test the configure option --enable-html-tests Enable HTML tests (requires xvfb, xwd and imagemagick)

Those tests check that Dillo renders a test page pixel-by-pixel identical to a reference page and are designed to catch regressions. They are not required for general use of the browser.

Best, Rodrigo. _______________________________________________ Dillo-dev mailing list -- dillo-dev@mailman3.com To unsubscribe send an email to dillo-dev-leave@mailman3.com

Hi Rodrigo sorry about the delay - i can send the emails to you (see below) and the pngs (see below) and button position changes to the mailing list as soon as i pass my state car emissions test - i have until friday 5/31/24 to prevent a $120.00 fine it seems - i think they also mentioned i could just donate the car to charity - but right now i'm the chartity who wants the car most - a new rotor and cap and spark plug wires appear to be in order here

On Mon, May 27, 2024 at 04:14:15PM -0600, pastebin@gmx.com wrote:

...

i have saved 140 emails from 2019-2022 in (2) tar.bz2 files (total 780K) your archive seems to be missing my posts :) which are in these as well i would have no idea about sending them to the archive.org but what about sending them to you directly rather then through the mailing list? they are in indivdual files just tarred up sylpheed folder dirs not in mbox format

Yes, you can send them to my email. Not sure what format sylpheed uses, but I will try to convert them to mbox and merge what is missing.

it looks like i can export the dirs to 'unix mbox' format in sylpheed itself i will tar.gz them and send them to you sometime this week as soon as i can

...

my only problems with 3.0.5 where changes in the size of 'dialog' popups that affected other popup sizes (i will be more specific when they next occur) there appears to be one 'size' that applies to all popups? am i correct?

Not sure what size are you referring to, is this an option in dillorc?

it is the size of any 'dialog' box that affects the size of all other boxes after that - some dialogs i like small and others i want bigger but if i change the one i want bigger to bigger - then the one i want smaller also becomes bigger and vice versa - leading to a horrible cirular situation :) i will send pngs to the mailing list when i do some testing

This is the default[1] but the manual has been updated heavily. If the local file cannot be opened, the remote version[2] is tried.

[1]:https://github.com/dillo-browser/dillo/blob/v3.1.0/src/ui.cc#L240-L255 [2]:https://dillo-browser.github.io/user_help.html

...

and adding duckduck to primary search choice when click 'magnifying glass'

This is also the default now.

defaults based on smart and intelligent use are always good ;)

...

and changing position of dialog buttons i will post them in case someone else wants them -

This may be useful, as sometimes they open in weird positions.

i will also send as soon as possible

Best, Rodrigo. _______________________________________________ Dillo-dev mailing list -- dillo-dev@mailman3.com To unsubscribe send an email to dillo-dev-leave@mailman3.com

Hi, On Sat, Jun 01, 2024 at 09:06:44AM -0600, pastebin@gmx.com wrote:

...

Yes, you can send them to my email. Not sure what format sylpheed uses, but I will try to convert them to mbox and merge what is missing.

see my private email to you

Just got it now, thanks!

see attached pngs

1.png 'save page as file' dialog - dialog size i want

2.png 'save page as file' dialog - file already exists - dialog size i want

3.png 'file exists' dialog - is the same size as 'save page as file' dialog - the size is to large for what i want so if i reduce the dimensions - the next 'save page as file' dialog i get will be to small (the same size as what i made the 'file exists' dialog

As a general note, in your pictures I see you are loading /root directly from Dillo, which suggest you are running Dillo as root. I would really avoid doing that while browsing, as any potential remote code execution we could have would give an attacker immediate root access on your machine (among other issues).

dillo saves one dimension size for the two dialog boxes maybe 2 separate size dimensions for 'save page as file' and 'file exists' dialog

If you have a working patch I could merge it into 3.1.1. Otherwise I can queue it among the other issues, as I would need to investigate further how to solve it. I have a patch somewhere that switches to a native file picker, which may solve one of the problems (it also remembers where you saved the last file). But this will probably be added in 3.2.0, as I'm finishing bug fixes for 3.1.1 (no more features for now).

do don't get ssl dialog warning when connecting to https site and does connection

src.IO.tls.c /* 3.0.5 modification choice = a_Dialog_choice(title, dialog_warning_msg, "Continue", "Cancel", NULL); if (choice == 1) { ret = 0; } */ ret = 0; dFree(dialog_warning_msg); } } dFree(title);

This shouldn't be a problem now, as the annoying pop-ups are fixed. But they still show when there is an actual problem with the TLS certificates, in which case you *don't* want to ignore them by default.

-

src.prefs.c /* 3.0.5 modification #define PREFS_HOME "http://www.dillo.org/" */ #define PREFS_HOME ""

src.ui.cc /* 3.0.5 modification StatusOutput->value("http://www.dillo.org"); */ StatusOutput->value("");

-

These are fixed too. You can configure the home address to another value in dillorc with the "home" option, no need to patch Dillo.

src.menu.cc /* 3.0.5 modification static Menu_popup_data_t page_data = {"Page menu", NULL, pm}; */ static Menu_popup_data_t page_data = {NULL, NULL, pm};

src.menu.cc /* 3.0.5 modification static Menu_popup_data_t image_data = {"Image menu", NULL, pm}; */ static Menu_popup_data_t image_data = {NULL, NULL, pm};

src.menu.cc /* 3.0.5 modification static Menu_popup_data_t form_data = {"Form menu", NULL, pm}; */ static Menu_popup_data_t form_data = {NULL, NULL, pm};

---

I think these are useful to be seen, as it may happen that you are clicking accidentally on an image that is larger than it look like, and the menu is not what you would expect.

...

...

and changing position of dialog buttons i will post them in case someone else wants them -

This may be useful, as sometimes they open in weird positions.

i didn't do this for 3.0.5 (just for earlier versions - i forgot to do it for 3.0.5 and it was okay :)

For the future, if you work with git (recommended), you can format your patches with `git format-patch` so they can be applied directly. Or with `git send-email` so you also include the patch message and other metadata. Alternatively, please format patches with `patch -up` so they are easy to integrate. Best, Rodrigo.