Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-04-03 | Merge with main repo. | Sebastian Geerken | |
2016-03-19 | MSG | corvid | |
2016-03-12 | MSG | corvid | |
2016-03-11 | update hsts_preload | corvid | |
2016-03-08 | openssl 1.0.2f does not like shutdown to be called during handshake | corvid | |
thread begins here: http://lists.dillo.org/pipermail/dillo-dev/2016-February/010682.html | |||
2016-03-05 | move include of FL/x.H under #ifdef X_PROTOCOL | Johannes Hofmann | |
This fixes compilation on Mac OS. reported-by: Yves de Champlain | |||
2016-01-23 | Merge with hg.dillo.org. | Sebastian Geerken | |
2016-01-18 | update hsts_preload | corvid | |
2016-01-07 | Set proper display for textblocks. | Sebastian Geerken | |
2015-12-21 | Merge with main repo. | Sebastian Geerken | |
2015-12-13 | update hsts_preload | corvid | |
2015-11-19 | readable location text | corvid | |
2015-09-09 | update hsts_preload | corvid | |
2015-07-06 | Merge with main repo. | Sebastian Geerken | |
2015-07-05 | wasteful use of strncpy | corvid | |
I never knew that if you give it a small string to copy into a big buffer, it'll waste time filling the rest of it with '\0'. | |||
2015-07-05 | tls.c a little cleanup | corvid | |
2015-07-05 | integrate cert algorithm + key checking code with the other checks | corvid | |
2015-07-05 | restore lost initialization of choice_answer | corvid | |
looks like we lost it in "changeset 2768:e7f98f931ed7 Modified a_Dialog_choice5() to accept any number of alternatives [p37sitdu]" | |||
2015-07-04 | permit secure->insecure redirection for now, add large comment | corvid | |
2015-07-03 | let's disallow mixed content | corvid | |
2015-07-03 | pop up dialog when an HTTPS page's form submission is insecure | corvid | |
2015-07-03 | enable prefs.http_persistent_conns by default | corvid | |
2015-07-02 | merge 3.0.5 branch | corvid | |
2015-06-30 | release datev3.0.5release-3_0_5 | corvid | |
2015-06-29 | HSTS add the preload list | corvid | |
2015-06-29 | prefs.http_strict_transport_security | corvid | |
2015-06-29 | HTTP Strict Transport Security | corvid | |
I'm not including the preload file yet. | |||
2015-06-24 | add a tls test site | corvid | |
2015-06-18 | use [IMG] placeholder even if prefs.load_images is true | corvid | |
2015-06-17 | mention the most recent ChangeLog additions in splash | corvid | |
2015-06-10 | SRDOP: Work on RTFL messages. | Sebastian Geerken | |
2015-06-03 | Merge with main repo. | Sebastian Geerken | |
2015-06-03 | web must be valid in order to continue in a_Http_connect_done | corvid | |
A site triggers this with a background image where the style is deleted upon </div>, and Capi_stop_client() finds that a_Cache_client_get_if_unique() is false, so nothing aborts the connection. And there's time for this to happen because we're doing TLS handshake. I don't know whether all of what triggered this is doing the right thing, but at least when it comes to capi, we can see that there's the idea of permitting it (with whether we ever actually want that in practice being yet another question). In any case, Http_make_query_str() definitely thinks the web is there. If we really decided that we wanted connections to continue without webs, we could stuff 1) what sort of thing are we requesting? 2) is this a third-party request? into the socket data. Making the query earlier is probably not advisable because we'd want the cookies available at the time that we send the query and not the cookies that were available somewhat earlier. | |||
2015-06-03 | show certificate hash algorithm (and complain feebly if it's weak) | corvid | |
2015-06-01 | const | corvid | |
2015-06-01 | url: rm unused flags | corvid | |
2015-06-01 | rm the old-style url alt stuff | corvid | |
2015-06-01 | TLS servers sorted | corvid | |
2015-06-01 | url: rm dead code | corvid | |
2015-05-31 | merge | corvid | |
2015-05-31 | rm MSG | corvid | |
2015-05-31 | rm MSG | corvid | |
2015-05-31 | fix up socket queue | corvid | |
2015-05-30 | fix warning | corvid | |
2015-05-30 | print certificate chain | corvid | |
2015-05-30 | let's not print tls alerts for 'close notify' | corvid | |
2015-05-29 | print out TLS version and cipher agreed upon after first connection with server | corvid | |
2015-05-29 | documentation and not-currently-possible error case | corvid | |
2015-05-29 | some more information for TLS warning popups | corvid | |
2015-05-28 | 'ssl' -> 'tls' where reasonable, given that ssl3 is dead and all | corvid | |
I used 'hg rename' and expected (at least hoped) that 'hg diff' would do what I would naturally want, but no. |