| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
| |
This fixes the behavior of the whitelist code so that whitelist
toggling toggles the FQDN (not the domain and all subdomains), unless
domain is explicitly used. This was the intended behavior but the old
code would automatically assume all subdomains anyways. This also
makes the new force_https stuff work correctly with FQDNs (no
subdomains) for the preloaded HSTS list.
|
|
|
|
|
|
|
| |
It was likely something from one of these changes that introduced all
of our focus bugs. We can reintroduce these commits again, much
slower than as I first developed them, and see if the focus issues
still appear.
|
|
|
|
|
|
| |
change runtime settings. Settings that have been modified show in a
highlighted color in the table. Tooltips describe the setting's
function, as well as the default values.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
whitelist settings) to make all requests to that domain use the HTTPS
scheme, similar to HSTS.
Install a new file, hsts-preload, into the resource dir. This is a
regular config file with a bunch of force_https = ... lines, which is
used to implement a preloaded HSTS list. Right now all the domains in
this file, except for conformal.com and cyphertite.com, are taken
directly from chromium's preloaded HSTS list (and should be synced
with this file every so often). Also implement a new setting,
preload_strict_transport (enabled by default), to enable or disable
the loading of this preloaded HSTS list. Document force_https and
preload_strict_transport in the manpage.
|
| |
|
|
|
|
|
|
|
|
|
|
| |
widgets (with the exception of the uri, we need this for the
progressbar). Because labels only take up as much room as they need,
the statusbar elements now dynamically fit together in a GtkBox
instead of giving GtkEntry a fixed size. Because the background color
of labels can not be colored directly, place a GtkEventBox underneath
the packing GtkBox (which is also transparent) and color that when
changing the colors for HTTPS sites.
|
|
|
|
|
| |
With this change, external_editor should now be able to edit HTML
input elements on Windows.
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
correctly in GTK3, maybe it was turned into a windowless widget) and
instead use a GtkEventBox behind the compact tab bar. Give this
GtkEventBox the same background color as the old separator, and put a
2 pixel spacing gap between each compact tab. This simplifies the
code required to paint these separators, and works for both GTK2 and
GTK3.
* * *
Call gtk_label_set_ellipsize() on the compact tab labels. This
prevents the main window from forcefully expanding when there's not
enough room for all of the compact tab labels.
|
|
|
|
|
| |
(keep current behavior) for gui_mode = normal, and disable for
gui_mode = minimal. Requires GTK3.
|
| |
|
|
|
|
|
|
| |
and p work with CLIPBOARD in addition to PRIMARY. Yanking copies to
both, and pasting tries PRIMARY first, and if empty, reads from
CLIPBOARD. This should make y/p/P work on windows.
|
|
|
|
|
|
| |
improve coloring when using other invasive GTK3 themes. The URI bar
should now be colored correctly, unless explicitly overridden in a
user theme.
|
|
|
|
|
|
| |
GTK2 is still supported. To build against GTK2, use:
$ GTK_VERSION=gtk2 make
|
| |
|
|
|
|
|
|
|
|
|
| |
text in the text box and seeing if it's any different from the new
text before attempting to enter command mode. Before, there was only
a check to see if there was any text. This also only sets t->active
if it is not NULL, so only the page's default text entry box is ever
used when entering insert_mode, instead of the last text box that was
typed into.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
allow_insecure_scripts, which, if WebKitWebSettings has the
enable-display-of-insecure-content and/or
enable-running-of-insecure-content properties, sets those to enable or
disable viewing or running of insecure content from secure websites.
Make these default to 0 in whitelist mode, and 1 otherwise.
* * *
Document in manpage.
|
|
|
|
| |
focused one. Document in manpage.
|
|
|
|
|
|
|
|
| |
allocated by the gtk_scrolled_window_new command instead of allocating
them first and then passing them as args. I was seeing some segfaults
from invalid t->adjust_h pointers earlier, and although I couldn't
figure out why the pointers were invalid, I have not yet seen that
crash after this change.
|
|
|
|
|
|
|
|
|
|
| |
load for each tab. Try to use this first when using the insert_mode
command instead of just focusing on the first text box in the html.
Don't switch to command mode if the currently-focused input box
contains any text in it. This prevents an annoying switch to command
after the page has focused a particular element and the user has
already begun typing something.
|
|
|
|
|
| |
or spawning functions. Remove the SIGCHLD handling as that is no
longer required to stop zombie processes.
|
|
|
|
|
| |
globally for all connections), and implement http_accept which acts
the same way but sets the HTTP Accept header.
|
| |
|
|
|
|
|
|
| |
and rely on other already-implemented features for these notifications
instead. This fixes a bug where Loading would remain in the tab title
after requesting a download by following a link.
|
|
|
|
| |
currently enabled or disabled in the statusbar.
|
|
|
|
|
|
|
| |
instead of the low-contrast one. Allow the userstyle and
usersyle_global commands to take an optional argument to use a
user-specified stylesheet instead of the default. Document in the
manpage.
|
|
|
|
| |
disabled
|
|
|
|
|
|
|
| |
ssl certificate is different from a previously cached certificate to
help prevent against MITM attacks. Prompt the user with an action to
take (show remote cert, allow for that session, or cache the new
remote cert).
|
|
|
|
|
|
|
|
|
|
|
| |
* Display a message when toggling proxy.
* Add a 'http_proxy_disabled' config option allowing a proxy to be disabled at
xombrero start.
* Add a note in the manual that polipo works with xombrero aswell as tsocks.
* In the config file, provide examples for polipo and tsocks running on
localhost with default ports.
OK marco
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
values from static memory, as they will be g_free()'d later if changed
at runtime or from parsing the config. "Special" settings (struct
special) do not need this as they use their own set functions.
This also fixes a bad bug where default_script pointed to "" somewhere
in static memory instead of an array of PATH_MAX size. This fixes a
crash when compiled with clang where changing this setting would try
to write a string possibly as large as PATH_MAX and overwrite other
static data.
Finally, make ssl_ca_file static to match all the other strings that
represent files or directories. Make it a special setting so static
memory is never freed. As an added bonus, ssl_ca_file is now tilde
expanded.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
push.
Make the set_ssl_ca_file pointer logic not suck.
'M' isn't a valid key modifier, use 'M1' in the manpage.
Add a function to escape an html string and use this for displaying
settings. Now things like <file> and <uri> are not interpreted as
html tags.
Kill a system() when running a custom uri script. Tildes are now also
expanded instead of being interpreted by the no-longer-being-called
system shell.
Plug a leak
Replace the system() call for external_editor with an execvp and while
here, kill a dangerous sprintf.
Remove an unused variable
|
|
|
|
|
| |
the config file, and make the last part of the path an link to spawn
external_editor to edit the configuration.
|
|
|
|
|
| |
works, will have to check later to make sure all the other features
got in.
|
|
|
|
| |
command. This will reset the value to its default.
|
|
|
|
| |
it in the manpage.
|
|
|
|
|
| |
external script rather then through xombrero. This makes it possible
to use scripts to support things such as mailto URIs. Fixes FS#253
|
| |
|
| |
|
|
|
|
|
| |
recommend any search engine. Save their choice to runtime, and
document how runtime is being read in the manpage.
|
| |
|
| |
|
|
|