aboutsummaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2016-07-07MBEDTLS_SSL_SESSION_TICKETS_DISABLEDcorvid
2016-07-07some status messages when using proxycorvid
2016-07-07a little renaming in tlscorvid
The handshake stuff should be named handshake. What should you call initialize/setup plus handshake, then? I don't know, but 'connect' for now, anyway.
2016-07-07try all IP addrs when connect()ingcorvid
as mentioned in the previous commit msg
2016-07-07complete connect() before moving on to TLS handshake or sending querycorvid
Johannes reported that mbed TLS didn't like the connect() to be ongoing still when the tls handshake was started on osx or dragonfly. For an earlier version of the fix (which failed), it was basically free to iterate through the IP address list upon connect() failure, so that was implemented, and now I'm artificially breaking this patch into two pieces to commit that separately.
2016-07-06Fix a flag in Cache_entry_inject(). Now the splash page is shown as finished.Jorge Arellano Cid
2016-07-06MSG clarificationcorvid
You can trust an intermediate certificate in a chain, so let's be careful with words here. It would of course be better to tell the user which certificate was trusted in that case, but my understanding is that I would have to go through each certificate in the chain and try to match it against all of the trusted certificates, like mbed tls's verification code does in the first place. This would involve a lot of digging around in mbed tls's structures and using resources...
2016-07-06rm code that has no effectcorvid
Until late 2007, it set a variable showing that ipv6 was working.
2016-07-06MSGcorvid
2016-07-04mergecorvid
2016-07-04recognize obsolete hash algorithms when complaining about...obsolete hash ↵corvid
algorithms
2016-07-04in some TLS MSGs, don't show port if it's the defaultcorvid
2016-07-03Fixed a couple of compiler warnings for IO.cJorge Arellano Cid
2016-07-03workaround for mbed TLS 2.3.0 include problemcorvid
reported by Nick Warne http://lists.dillo.org/pipermail/dillo-dev/2016-July/010941.html checking mbedtls/ssl.h usability... no checking mbedtls/ssl.h presence... yes configure: WARNING: mbedtls/ssl.h: present but cannot be compiled configure: WARNING: mbedtls/ssl.h: check for missing prerequisite headers? configure: WARNING: mbedtls/ssl.h: see the Autoconf documentation configure: WARNING: mbedtls/ssl.h: section "Present But Cannot Be Compiled" configure: WARNING: mbedtls/ssl.h: proceeding with the compiler's result checking for mbedtls/ssl.h... no configure: WARNING: *** mbed TLS 2 not found. Disabling SSL/HTTPS/TLS support. ***
2016-07-03trim tld listcorvid
2016-07-03clean up host:port usage, particularly with ipv6corvid
2016-07-03quiet MSGcorvid
2016-07-03use mbed TLScorvid
2016-07-03status msgcorvid
2016-07-02Attribute 'float' defines a floating Textblock even if 'display' is 'inline'.Sebastian Geerken
2016-06-28hsts_preload update (mostly to update location of mozilla's source file)corvid
2016-06-26have prefs parser syntax error print line numbercorvid
2016-06-24Changed a bug meter message for clarity.Jorge Arellano Cid
2016-06-24Temporary fix for links in HTML5.Jorge Arellano Cid
Avoid closing the <A> element until HTML5 rules are in place for the parser.
2016-06-21Removed the w3c_plus_heuristics dillorc option.Jorge Arellano Cid
No longer necessary since the new nesting-cleanup design.
2016-06-21Remove TagLevel from the TagInfo structure.Jorge Arellano Cid
No longer necessary after the redesign of the parser's cleanup process for tag nesting.
2016-06-21Make the Tags array in html.cc a "static const".Jorge Arellano Cid
This needed moving around some functions, nothing else. FWIW, we had it declared extern because that's C++ way to declare a forward variable, the side effect of it being extern linkage.
2016-06-21New design for the nesting-cleanup process within the parser.Jorge Arellano Cid
* Forbidden nesting now is handled by cleanup_at_open. (it previously used an ad-hoc function hooked into the process) Much safer and versatile now. [1],[2],[4] * Heuristical cleanup at close is no longer used. cleanup_at_close is now based on block/inline element/container semantics, and also cosiders special nesting rules expressed in the DTD for HTML-4.01. Note: this design is easy to tailor for HTML5. [2] * Bug reporting changed and is now is more centralized in cleanup_to_idx. * The bug meter gives more accurate and concise messages. [4] * Page rendering improved as now the cleanup process strives to produce a correct tree out of Tag Soup, before feeding it to Dw. [4] * Better handling/recovery from Tag Soup (even in the worst cases). [5] * The w3c_plus_heuristics=FALSE mode was removed (not necessary anymore) * Elements with optional close also follow Firefox de facto rules. * Special case logic is now isolated in helper functions. A few examples: [1] http://dillo.org/test/cross-nesting-simple.html [2] http://slashdot.org/ [3] http://apod.nasa.gov/apod/ap160604.html [4] http://www.mypetchicken.com:80/catalog/Day-Old-Baby-Chicks/Olive-Eggers-p1478.aspx [5] http://dillo.org/test/sd3.html
2016-06-21Remove the "block element" flag from the TagInfo structure.Jorge Arellano Cid
It was redundant with the "inline element" flag. i.e. "block element" = ~"inline element"
2016-06-18Fix <button> size (treat as inline).Sebastian Geerken
2016-06-15BUG_MSGcorvid
2016-06-14BUG_MSG can give false positives with HTML5corvid
2016-06-10close hsts_preloadcorvid
2016-06-04mergeJorge Arellano Cid
2016-06-04Avoid nesting of the A element (part2 of changeset 5a410962c77e).Jorge Arellano Cid
This is the cleanup at open time (the other patch is the cleanup at close time); they catch different problems. e.g. <a href="1.html">Word1 <a href="2.html">Word2</a> Fixes http://apod.nasa.gov/apod/ap160604.html
2016-06-04update hsts_preloadcorvid
2016-05-31comment out BUG_MSGcorvid
2016-05-28update hsts_preloadcorvid
2016-05-27Set iframe as an inline element.Jorge Arellano Cid
This avoids false-positive nesting messages from the bug meter.
2016-05-27Don't allow nesting of the A element (fixes slashdot.org).Jorge Arellano Cid
A lingering open A element can lead to invisible content. e.g. http://slashdot.org/ Note: slashdot_a_bug.html testcase in my HD.
2016-05-24silence MSGcorvid
2016-05-11Silenced a few old debug messages.Jorge Arellano Cid
2016-05-11Fixed handling of BODY and HTML tags. Also improved their html-bug messages.Jorge Arellano Cid
BODY and HTML have optional open and close, making them tricky to handle. Even more when considering Tag soup pages with multiple body or html sections, and corner cases. This patch tackles the problems by leaving the first HTML and BODY stack elements open, until EOF. There's also better html-bug detection and messages, and more accurate comments in the code. Beware: it may look simple, but it's not!
2016-05-07status msgcorvid
2016-05-04update hsts_preloadcorvid
2016-05-02silence the HSTS transformation MSGcorvid
2016-04-30Fixed a very minor glitch in clear_cb()Jorge Arellano Cid
2016-04-30Fixed a minor bug for a corner case in dpi cookie handlingJorge Arellano Cid
2016-04-18Set fallback value for textarea rows to 3.Sebastian Geerken
2016-04-13Merge with hg.dillo.org.Sebastian Geerken