summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-05-02Add test for remembered ignored certificate errorsv1.4.xFlorian Bruhin
This is a continuation of the previous commit for #5403. The tests are split up from the commit itself so that the fix can be backported with less conflicts. See #5403 (cherry picked from commit 45a2be3f9f32f900c0b567998433d43055f722e2)
2020-05-02Security: Remember hosts with ignored cert errors for load statusFlorian Bruhin
Without this change, we only set a flag when a certificate error occurred. However, when the same certificate error then happens a second time (e.g. because of a reload or opening the same URL again), we then colored the URL as success_https (i.e. green) again. See #5403 (cherry picked from commit 021ab572a319ca3db5907a33a59774f502b3b975)
2018-09-02Update changelog for v1.4.2Florian Bruhin
Whoops, should've done this before tagging...
2018-09-02Release v1.4.2v1.4.2Florian Bruhin
2018-09-02Handle :// as URL patternFlorian Bruhin
(cherry picked from commit 67b4b7d490b901a494b62c3b44833a247eabfa34)
2018-09-01Mark SQLITE_IOERR/SQLITE_CANTOPEN as environmental errorFlorian Bruhin
Fixes #3060 IOERR: The SQLITE_IOERR result code says that the operation could not finish because the operating system reported an I/O error. CANTOPEN: The SQLITE_CANTOPEN result code indicates that SQLite was unable to open a file. The file in question might be a primary database file or on of several temporary disk files.
2018-08-31Make sure the host blocker doesn't block 0.0.0.0Florian Bruhin
(cherry picked from commit 1815070dab8b2fccbdf27ff0259f88723914e925)
2018-08-31Remove unneeded importFlorian Bruhin
(cherry picked from commit 65caf40b06c23585feb4675f71a28e34c609b2f4)
2018-08-30Elide URLs at the end and not in the middleFlorian Bruhin
With a URL like http://www.example.com/long/path/end, an elision like http://www.example.com/…/path/end would be nicest, but using ElideMiddle means we can end up with something like http://www.example.…/path/end, which can possibly trick a user during a phishing attempt. Instead, let's just always elide at the end, so we end up with http://www.example.com/long/…. That makes sure the scheme/hostname (which are most important) are visible as long as possible. Fixes #4170. (cherry picked from commit a13607674fcb5c1ccd8914e48da5ae626a35f951)
2018-08-27Don't alphabetically sort tab completion.Jimmy
`ListCategory` sorts its completion by default, we are already building the categories in the right order so don't need that. The test tests the case of where you have 11 tabs and if the model was sorted the tabs with index 10 and 11 would be sorted before the one with index 2. The `random.sample` bit for the tab url and title is to also make sure the model isn't being sorted on those columns, whithout haveng to write and all ten lines. (cherry picked from commit b192164f2e663dc96e697e369654ec79dc529bb3)
2018-08-19eslint: Disable require-unicode-regexpFlorian Bruhin
See https://eslint.org/docs/rules/require-unicode-regexp It would be useful to have, but Chromium 49 coming with Qt 5.7 doesn't support it (Chromium 56 in Qt 5.9 would)... Also see #3839
2018-08-19Fix lineparser testsFlorian Bruhin
(cherry picked from commit 9eeaa4f45d9f7244bf13d11d84cc8fb0d1b45acb)
2018-08-19Fix indentFlorian Bruhin
(cherry picked from commit 6b044d4affe2929bcf01911811d9ebb29dcf9ad4)
2018-08-18Fix "Unnecessary generator - rewrite as a list comprehension."lufte
(cherry picked from commit 9c4337c359a5641c20f09e2f3deef25e9ef1c372)
2018-08-18Some memory improvements with generatorslufte
(cherry picked from commit fd70d6d2d8d516ad424211d0fb7b89caee771009)
2018-08-18Perform attribute updates on a record's clonelufte
(cherry picked from commit 68b9dff74733278fb8095215db3bd5f00fa3aa50)
2018-08-15Make content.webrtc_public_interfaces_only work on Qt 5.11Florian Bruhin
69abc9a1a1bb6334537b89b5dcf980c40d6b8cbf added the argument for Qt 5.9, but didn't add the QWebEngineSetting for Qt >= 5.11. See #3010, #2163. (cherry picked from commit e927fecbbc12053d2e64deddf4bc89e570f0dcc6)
2018-08-15Fix chrome bookmarks import on `sync_transaction_version`Jay Z
(cherry picked from commit fcb3de8ee3a7580ff9887b909aff02d7d88f700c)
2018-08-15Handle OSError when creating download directoryFlorian Bruhin
Fixes #2570 (cherry picked from commit 7ed71592e013ab2c7e7eaad92b832d12560c3798)
2018-08-15Use exist_ok=True for os.path.makedirsFlorian Bruhin
See #2570 (cherry picked from commit 1cb547a8de9228be81db912857cc0a61116d8c05)
2018-08-15Handle invalid URLs in acceptNavigationRequest in the tab APIFlorian Bruhin
(cherry picked from commit ee06ba0140ef5867abaae94b8270ea12960c10a9)
2018-08-15Ignore invalid URLs in acceptNavigationRequestFlorian Bruhin
(cherry picked from commit 7ac7ccc2967d19cae332e7082e380e7df27d1e75)
2018-08-15Add workaround commentFlorian Bruhin
(cherry picked from commit d830dd69a46149ad37779975374d2a0c2025f5ef)
2018-08-15Don't require user interaction for clicking qute:// linksFlorian Bruhin
See #4090, #4073 (cherry picked from commit f69cd2259e0ffc1d4e93078059b4229b81862bb4)
2018-08-15Add catch and error handling for errors in follow_selected clickJay Kamat
(cherry picked from commit 31d318ee0a3b9328e20cffcc8d410928fb40e3ac)
2018-08-15Fix checks for Nouveau workaroundFlorian Bruhin
(cherry picked from commit 8a748741ba3fa3214a1e4c7f3c250ff275392102)
2018-08-15Enable XSS auditing by defaultFlorian Bruhin
Qt disables this by default, but Chromium does have it enabled. I also submitted a change to Qt to hopefully enable it by default there starting with Qt 5.12: https://codereview.qt-project.org/#/c/198354/15 This also removes the claim of having a (big) performance impact, as Chromium's XSS design doc says the opposite: https://www.chromium.org/developers/design-documents/xss-auditor (cherry picked from commit a72eee8e39b6d982d936cad999d9f50cd20dc5ce)
2018-08-15Refactor print handling and fix window.printFlorian Bruhin
On Qt 5.7.1, window.print() caused a CommandError which wasn't handled as the command was called from accept_navigation_request. Instead, we now show the dialog in AbstractPrinting and use that directly. (cherry picked from commit 9298f3d055d6cfa73fba9f326ca7d80520276899)
2018-08-15Process all events before issuing an alertHendrik R
Fixes #2603 The call to processEvents fixes an apparent race condition with some window managers, e.g. i3. QT seems to be thinking, that the window is not marked as urgent and toggles it twice, so synchronizing before issuing the alert makes QT behave correctly. This change should not change the behaviour on other systems only correct the fault reported in #2603. (cherry picked from commit b1a060fb717865c338af5b4f5063bfb31e8ef74f)
2018-07-11Release v1.4.1v1.4.1Florian Bruhin
2018-07-11Update changelog for v1.4.1Florian Bruhin
2018-07-11CVE-2018-10895: Fix CSRF issues with qute://settings/set URLFlorian Bruhin
In ffc29ee043ae7336d9b9dcc029a05bf7a3f994e8 (part of v1.0.0), a qute://settings/set URL was added to change settings. Contrary to what I apparently believed at the time, it *is* possible for websites to access `qute://*` URLs (i.e., neither QtWebKit nor QtWebEngine prohibit such requests, other than the usual cross-origin rules). In other words, this means a website can e.g. have an `<img>` tag which loads a `qute://settings/set` URL, which then sets `editor.command` to a bash script. The result of that is arbitrary code execution. Fixes #4060 See #2332 (cherry picked from commit 43e58ac865ff862c2008c510fc5f7627e10b4660)
2018-07-11NSIS: Add missing quoteFlorian Bruhin
(cherry picked from commit 3b9b2bc30ec759c4b978d705a467ef32e32a2bbb)
2018-07-11NSIS: Uninstall old version before installingFlorian Bruhin
Supersedes #4054 (cherry picked from commit 0b9855598742e09853efff798a4f61cbc86fded5)
2018-07-10Make link_pyqt work with PyQt 5.11Florian Bruhin
(cherry picked from commit 14205ae14f29fd9c1eadeeaf2d2f5bbf9718c573)
2018-07-10Allow PyQt 5.10 to fail on TravisFlorian Bruhin
See #4055 (cherry picked from commit 727b418d8b25d2af832ca43fe243f5f1b24bac01)
2018-07-10Add workaround for chrome-extension:// URLsFlorian Bruhin
Fixes #4049 (cherry picked from commit b9e3d3cab905b629f07696e69bcd7a20d1feceef)
2018-07-10Strip trailing newlines from pastebin URLFlorian Bruhin
(cherry picked from commit 274b66ec46799799fc4e8cc4015a6369ac3e4042)
2018-07-10Add a mkvenv-pypi-old environmentFlorian Bruhin
Fixes #4038 See #3662 (cherry picked from commit e80e695a56516de6bea435345f2ae3589c42d127)
2018-07-10Handle download errors when the reply is already goneFlorian Bruhin
Fixes #1270 (cherry picked from commit 0a31e19eda91fbb4d5e6a333591cd0b028e7c25a)
2018-07-03Release v1.4.0v1.4.0Florian Bruhin
2018-07-03Update changelog for v1.4.0Florian Bruhin
2018-07-03Ignore a new Qt 5.11 lowlevel messageFlorian Bruhin
2018-07-03Skip JS test which is too flakyFlorian Bruhin
2018-07-03Update changelogFlorian Bruhin
2018-07-03Merge remote-tracking branch 'origin/pr/4019'Florian Bruhin
2018-07-03Ignore "Lost UI shared context" error happening on AppVeyorFlorian Bruhin
2018-07-03tox: Always allow setting python via envvarFlorian Bruhin
2018-07-03Try importing QtWebEngine from AppVeyorFlorian Bruhin
2018-07-03Remove AppVeyor debuggingFlorian Bruhin