| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2015-06-29 | prefs.http_strict_transport_security | corvid | |
| 2015-06-29 | HTTP Strict Transport Security | corvid | |
| I'm not including the preload file yet. | |||
| 2015-06-28 | MSG | corvid | |
| 2015-06-28 | cookies be careful with overflow with ridiculously huge Max-Age values | corvid | |
| ...not that there's any obvious justification for storing cookies for decades. | |||
| 2015-06-24 | add a tls test site | corvid | |
| 2015-06-18 | use [IMG] placeholder even if prefs.load_images is true | corvid | |
| 2015-06-03 | web must be valid in order to continue in a_Http_connect_done | corvid | |
| A site triggers this with a background image where the style is deleted upon </div>, and Capi_stop_client() finds that a_Cache_client_get_if_unique() is false, so nothing aborts the connection. And there's time for this to happen because we're doing TLS handshake. I don't know whether all of what triggered this is doing the right thing, but at least when it comes to capi, we can see that there's the idea of permitting it (with whether we ever actually want that in practice being yet another question). In any case, Http_make_query_str() definitely thinks the web is there. If we really decided that we wanted connections to continue without webs, we could stuff 1) what sort of thing are we requesting? 2) is this a third-party request? into the socket data. Making the query earlier is probably not advisable because we'd want the cookies available at the time that we send the query and not the cookies that were available somewhat earlier. | |||
| 2015-06-03 | show certificate hash algorithm (and complain feebly if it's weak) | corvid | |
| 2015-06-02 | Updated dw::Table documentation. | Jeremy Henty, Sebastian Geerken | |
| 2015-06-02 | Remove dw::Table::_unused_calcColumnExtremes(). | Jeremy Henty | |
| 2015-06-01 | dillo man page date | corvid | |
| 2015-06-01 | NotSoSimpleVector: nicer image | Sebastian Geerken | |
| 2015-06-01 | Split up user and developer documentation. | Sebastian Geerken | |
| 2015-06-01 | Updated doc directory. | Sebastian Geerken | |
| 2015-06-01 | const | corvid | |
| 2015-06-01 | url: rm unused flags | corvid | |
| 2015-06-01 | rm the old-style url alt stuff | corvid | |
| 2015-06-01 | TLS servers sorted | corvid | |
| 2015-06-01 | url: rm dead code | corvid | |
| 2015-05-31 | merge | corvid | |
| 2015-05-31 | rm MSG | corvid | |
| 2015-05-31 | rm MSG | corvid | |
| 2015-05-31 | fix up socket queue | corvid | |
| 2015-05-30 | fix warning | corvid | |
| 2015-05-30 | print certificate chain | corvid | |
| 2015-05-30 | let's not print tls alerts for 'close notify' | corvid | |
| 2015-05-29 | print out TLS version and cipher agreed upon after first connection with server | corvid | |
| 2015-05-29 | documentation and not-currently-possible error case | corvid | |
| 2015-05-29 | some more information for TLS warning popups | corvid | |
| 2015-05-29 | _MSG_ERR unused, unneeded, because it doesn't make much sense | corvid | |
| 2015-05-28 | libpng 1.6 series works for me | corvid | |
| 2015-05-28 | cookies is_ssl -> is_tls | corvid | |
| 2015-05-28 | update docs a bit | corvid | |
| 2015-05-28 | 'ssl' -> 'tls' where reasonable, given that ssl3 is dead and all | corvid | |
| I used 'hg rename' and expected (at least hoped) that 'hg diff' would do what I would naturally want, but no. | |||
| 2015-05-28 | make http_max_conns truly per server/proxy rather than host | corvid | |
| And separate http from https for safety while we're at it. We were checking this where we needed to, but it would be easy to forget about in the future. Not that very much happens when you try http://example.com:443 or https://example.com:80, but I'm being careful nevertheless. | |||
| 2015-05-27 | Made view-source dpi use CSS formatting (it's shorter and cleaner) | Jorge Arellano Cid | |
| BTW, is there a point in using a monospaced font? Besides it looks like code printing (which is good), a proportional-spaced font may be easier to read. | |||
| 2015-05-26 | ChangeLog | corvid | |
| 2015-05-26 | Fix view-source dpi to handle null characters correctly | Jorge Arellano Cid | |
| Although not allowed in text contexts, null characters should not stop/halt/fail dpi protocol, thus the patch. Test Example. Display a file with these contents: null padding^@^@ (two trailing null characters) and view source for it. Note that dillo will not _display_ the file completely correct, it will eat a char after each null, but this is not a problem in dpi nor dpip but in rendering, the cache gets it right. Adding code to correctly _display_ these anomalous pages is probably not worth the effort though. | |||
| 2015-05-20 | more ChangeLog | corvid | |
| 2015-05-20 | ChangeLog | corvid | |
| 2015-05-20 | ChangeLog | corvid | |
| 2015-05-19 | http use-after-free | corvid | |
| openbsd tripped over this for me | |||
| 2015-05-18 | make it clearer that ssl popups are about security (well, if one's WM shows ↵ | corvid | |
| titles) I've noticed how users on forums can be like "Oh, it must be something about bugs in dillo. But it manages to load the page". This is a degree of misunderstanding which I wouldn't expect from anyone interested in using dillo, but there it is, so I should deal with it. | |||
| 2015-05-18 | let's add LibreSSL to the OpenSSL licensing linking exception | corvid | |
| I tried dillo on openbsd and, unsurprisingly, it seems fine with libressl. I still would like it if some other TLS library would become the clear choice for dillo at some point... | |||
| 2015-05-18 | let fltk wrap this dialog's text | corvid | |
| 2015-05-18 | clean up the SSL error dialog strings a little | corvid | |
| 2015-05-18 | gain some space in a_Dialog_choice | corvid | |
| 2015-05-18 | not use strcpy here | corvid | |
| I see that openbsd likes to complain when it's used, and we certainly don't have a deep need for it in this case. | |||
| 2015-05-16 | dillorc: search urls duckduckgo and startpage always redirect to https, so ↵ | corvid | |
| just specify https | |||
| 2015-05-09 | ChangeLog | corvid | |
 |
index : dillo | |
| Dillo, a multi-platform graphical web browser |
| aboutsummaryrefslogtreecommitdiff |