about summary refs log tree commit diff stats
Commit message (Collapse)AuthorAgeFilesLines
...
* Unbreak GTK2Josh Rickmar2013-06-061-1/+1
|
* Don't color bar when warning of cached cert mismatchJosh Rickmar2013-06-061-2/+2
|
* Fix loads of memory issuesJosh Rickmar2013-06-064-134/+193
|
* cleanup cert handlingDavid Hill2013-06-051-18/+43
|
* libsoup proxy-resolver supportDavid Hill2013-06-052-11/+47
|
* Code cleanup and clearer var namesJosh Rickmar2013-06-052-17/+15
|
* Allow saving certs from :cert show pageJosh Rickmar2013-06-052-3/+16
| | | | | | | | This allows the user to avoid a race where, after verifying a cert via :cert show, they must go back to the site and save the cert. During this time, the cert may have been modified, so saving it from the :cert show page will use the PEM-encoded cert currently shown and saved in memory instead.
* Use homepage for HTTPS GET requestJosh Rickmar2013-06-032-5/+18
| | | | | | Change the additonal GET request to check certs to a HEAD, and cut the URI to not include any GET arguments. We don't want to use theu URI verbatim as it may contain args that should not be repeated.
* Prepare for release 1.5.0.David Hill2013-05-161-1/+1
|
* start signing tagsDavid Hill2013-05-161-1/+1
|
* Kill GTK 3.8 size warningJosh Rickmar2013-05-141-9/+10
|
* cache is disabled by defaultDavid Hill2013-05-141-1/+1
|
* add enable_cache to manpageDavid Hill2013-05-141-0/+3
|
* add new configuration option 'enable_cache'David Hill2013-05-143-0/+41
| | | | When set to 1, web caching will be enabled. Default is 0.
* gtk_widget_modify_font is deprecated. Use gtk_widget_override_font if using ↵David Hill2013-05-133-13/+19
| | | | gtk 3.0.
* add urlmod plus and minMarco Peereboom2013-01-023-0/+97
|
* KNFJosh Rickmar2013-05-141-5/+7
|
* Remove threadingJosh Rickmar2013-05-148-181/+15
| | | | | | | Now that the cert sideband thread is gone, threading can be removed. Making GTK calls across multiple threads is also deprecated in newer GTK versions and is severly broken on Windows, so there's no point in keeping this around.
* Use libsoup exclusively for retrieving remote certsJosh Rickmar2013-05-142-484/+183
| | | | | | | | | | | | | | This removes the side channel for getting and verifying remote HTTPS certificates. As the http_proxy settings only affected messages downloaded as part of the webkit soup session, this side channel would create its own TCP connections which sidesteped the proxy, leaving a privacy leak. For simplicity, the remote certificate chain is now saved in pem format as part of the tab structure, and converted to a gnutls certificate chain when needed for viewing and displaying certs. Most of the initial code done by dhill@ and marco@
* Add -I paths for recent Ubuntu. From Kyle Isom kyle@tyrfingr.isJohn C. Vernaleo2013-05-131-0/+2
|
* Don't allow freeing NULL in open_tabs()Josh Rickmar2013-05-011-13/+13
|
* plug memleak on gnutls_x509_crt_list_import failureDavid Hill2013-04-201-0/+1
|
* plug memleak in get_local_cert_chainDavid Hill2013-04-201-0/+1
|
* plug memleak if SOUP_URI_VALID_FOR_HTTP fails.David Hill2013-04-202-2/+10
|
* Ignore temporary tooltip.h file for linux in git.John C. Vernaleo2013-04-191-0/+1
|
* Add osx build support (using macports).John C. Vernaleo2013-04-195-0/+421
| | | | | | Based on initial patch from Tim Meunier <trondd@gmail.com>). Add temporary files to .gitignore.
* typo, from Luis Henriques <henrix@camandro.org>Marco Peereboom2013-03-111-1/+1
|
* Add RESDIR definition to FreeBSD Makefile.John C. Vernaleo2013-03-081-0/+1
|
* Add install of $(PREFIX)/share/applications to Makefile.Reginald Kennedy2012-12-182-1/+4
| | | | | This fixes issues when installing to a clean path such as with package creation.
* Update the uninstall target in the linux Makefile.John C. Vernaleo2012-11-301-0/+3
|
* add -Wno-deprecated-declarations to silence buildMarco Peereboom2012-11-301-1/+1
|
* add proxy_cmd proto, reported on irc by rmullMarco Peereboom2012-11-301-0/+1
|
* Prepare for release 1.4.0.Marco Peereboom2012-11-281-2/+2
|
* fix icon apearing when http_proxy is setMarco Peereboom2012-11-281-3/+3
|
* add tor icon toggle for proxyMarco Peereboom2012-11-2810-6/+34
| | | | requested by many
* Add a button to the toolbar to toggle the proxyJosh Rickmar2012-11-283-1/+35
|
* Kill whitespace in aliases. Fixes FS240.Josh Rickmar2012-10-301-0/+4
| | | | | | | This prevents displaying any extra whitespace between the comma and the url in the alias definition from being displayed in the statusbar. Found by Cody Write (writecode on Flyspray)
* Initialize cookie whitelist. Fixes FS388.Josh Rickmar2012-10-301-0/+1
| | | | Found by Cody Write (writecode on flyspray)
* Install xombrero.desktop. Fixes FS384.Josh Rickmar2012-10-285-0/+6
|
* Sync preloaded HSTS with chromiumJosh Rickmar2012-10-281-3/+10
|
* Fix for FS387Josh Rickmar2012-10-281-8/+18
| | | | From cody on irc
* Fix for FS273Josh Rickmar2012-10-281-22/+28
| | | | From cody on irc
* Use DDG's default site (js) in example configJosh Rickmar2012-10-281-2/+2
| | | | Patch from cody in irc
* Make all new tabs open in new windows in tabless modeJosh Rickmar2012-08-292-1/+14
|
* Actually track the header filesJosh Rickmar2012-10-102-0/+1964
|
* Implement header changes as requested by jy-pJosh Rickmar2012-10-105-66/+100
| | | | | | | | | | | | | | | | | | | This change introduces a new RB tree to keep track of identities (defined as being different combinations of modified HTTP headers, so far only User-Agent and Accept). Whenever a site is visited, this tree is checked to see if it has been accessed before, and if it has, the previously used Accept and User-Agent headers will be used. If the site has not been visited before during the browser's lifetime, a new entry will be created in this tree to keep track of which headers to use the next time. A site is defined as a FQDN, so requests made to cross site resources or resources on a different subdomain will generate a new saved identity. The second change adds two new config files to the resource dir to read in additional user_agent and http_accept values scraped from the logs of www.bitrig.org. The idea of this is to keep rotating through each of these on every new site visit to provide more anonymity and thwart web tracking by looking at the headers being sent.
* Add regex support to whitelistsJosh Rickmar2012-09-188-219/+224
| | | | | | | | | | | | | | This modifies the whitelist and https forcing code to internally use unix extended regular expressions to match domains. The old config syntax converted to an appropiate regular expression. Inputing of raw regular expressions is possible by prepending the string "re:" in front of a regular expression, for example: js_wl = re:^(.*\.)*cyphertite\.com$ would be the same as js_wl = .cyphertite.com
* Prepare for release 1.3.1.Marco Peereboom2012-09-151-1/+1
|
* Include NetBSD port, from ZplayJosh Rickmar2012-09-154-1/+531
|
* Sync preloaded hsts with chromiumJosh Rickmar2012-09-151-0/+5
|