| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
| |
There are no more sub frame resources under test url, so nothing to
check for firstPartyUrl and initiator.
Change-Id: I12ddf33ec2909d9a427a9819725d941960575612
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit a282c7a36f8707e0777df201855ef0a8a1980de1)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit e7d56d6c0a942a89bd9d497b57cbb0f70e39bb27)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty 4cb55651..d77379c5:
> [Backport] CVE-2021-21153: Stack overflow in GPU Process
> [Backport] CVE-2021-21152: Heap buffer overflow in Media
> [Backport] CVE-2021-21157: Use after free in Web Sockets
> [Backport] CVE-2021-21156: Heap buffer overflow in V8
> [Backport] Security bug 1171954
> [Backport] CVE-2021-21149: Stack overflow in Data Transfer
> [Backport] Dependency for CVE-2021-21150: Use after free in Downloads [1/1]
> [Backport] CVE-2021-21150: Use after free in Downloads
> FIXUP: [Backport] CVE-2021-21149: Stack overflow in Data Transfer
> FIXUP: [Backport] CVE-2021-21149: Stack overflow in Data Transfer
Task-number: QTBUG-90575
Pick-to: 5.15
Change-Id: I37640b05028616fae93e1bb301d92968ef24b0b1
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
| |
Change-Id: Iad9a3fa1df35e7c1dfeee12398d053488803f450
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Flush ui messages in profile adapter instead, otherwise
we will refer to already destroyed adapter
(which we track by qpointer), if some ui messages are
being processed. Note profile adapter owns profile so
it should be fine to notify about coming browser
context destruction.
Pick-to: 5.15
Change-Id: Idaa29a459c984ca73d1f5f9ca61b96c9b4017259
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
| |
Task-number: QTBUG-91187
Change-Id: Icaef781025791a94c0e5dd85039c33b8ae45de99
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
(cherry picked from commit 0b5f110234256eabaa264189d9117069f2a2d144)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
|
|
|
|
|
|
|
|
|
|
|
| |
It is now in a separate file, and will silently fail by just breaking
the overlay highlights.
Fixes: QTBUG-91178
Change-Id: If1787671962bd8ee50fae6c60f7c46692ab51c02
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
(cherry picked from commit 50524f176b6ecd812f413f85703c7f410c7e71a3)
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
|
|
|
|
|
| |
Change-Id: I653dee03adcad422d1210fda48bdd5b701382b00
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
|
|
|
|
|
|
|
|
|
| |
This patch fixes popup position when popup have parent
window. Make simple offset calculation and add rotated
pupups support in another patch.
Change-Id: Id53524375eeecbc316dc6f6bef7f32669a72beb3
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Quicknanobrowser uses "onClosing: destory()" on main window.
This however will end up badly when there is open popup,
since calling destroy on exit immediately deletes WebContents,
while popup is still not closed.
Let the application first close/destroy popup and then main
qquickwindow.
Change-Id: I9c3974cd0f6126558b876cb0199928797e3f7a47
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When destroying WebEngineProile we send notifications like
content::BrowserContext::NotifyWillBeDestroyed, this works well
with global profile where there is no more render process around,
moreover we still pump ui messages before we destroy profile. However,
with user profiles we destruct BorwserContext and there can be still
RenderProcessHost using it. Flush messages before running
BrowserContext destructor.
Change-Id: I4d8cda2bc1e2ae3dc0781bf3570a36db7d07223a
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
On wayland with weston the popup quickwindow should have
parent otherwise it gets into 'mad' mode and jumps
around the screen.
This also fixes similar issue on some embedded x11 setups.
Adding parent brakes positioning of popups, but the
fix is done in followup patch.
This patch also has a regression, closing application
during opened comobox will cause crash, however before this
patch application simply did not remove render process or
"hanged" on exit. This issue is also handled in follow up
patches.
Change-Id: I876b9a5b58a731eee95f30a52a3c2705730631da
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty a38752bf..391a8eef6:
> Fix memory thresholds over 20GiB
> [Backport] Security bug 1162198
> [Backport] Security bug 1161654
> [Backport] CVE-2021-21140: Uninitialized Use in USB [1/2]
> [Backport] CVE-2021-21140: Uninitialized Use in USB [2/2]
> [Backport] CVE-2021-21132: Inappropriate implementation in DevTools
> [Backport] Security bug 1135594
> Make nss certificates disableable for QtPdf
> [Backport] Security bug 1144646
> [Backport] WebRTC bug 12105
> [Backport] Security bug 1127774
> [Backport] Dependendy for security bug 937131 (1/1)
> [Backport] Security bug 937131
> [Backport] CVE-2021-21122: Use after free in Blink
Task-number: QTBUG-90575
Change-Id: I6761314f7b2da13854362c39fbb80ab0db138fb2
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
| |
No QMap::insert as set or append.
Change-Id: Icb05e43c4cb3d45171a164bdda7420d066eab79e
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty 1711a9c9..a38752bf:
> [Backport] CVE-2021-21147: Inappropriate implementation in Skia
> [Backport] CVE-2021-21146: Use after free in Navigation
> [Backport] CVE-2021-21145: Use after free in Fonts
> [Backport] CVE-2021-21148: Heap buffer overflow in V8
Change-Id: I4955f682de0e741a0bf279218fb3ce2efa9f8aac
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
|
|
|
|
|
|
|
|
|
|
|
| |
This site crashes after 0185f41 when it tries to use the
Hangouts extension. Background WebContent of this extension
(and future guest views) doesn't have a corresponding
WebContentsAdapterClient.
Change-Id: I2028372a176a7194bf037093f9364d942bef969a
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
| |
Remove URLs of removed WebUIs. Some removed URLs are just not for WebUI.
Also add new ones that are available with Chromium 87.
Change-Id: I2a749b5ff20621f2fc4cb168a2a40b571d79bdd0
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
| |
Also add third party python dependencies of tracing to the snapshot.
Pulls in the following changes:
a7c1c17e0b9 [Revert] Do not bundle the tracing UI resources
1711a9c9bf4 Enable build of tracing UI
Change-Id: I0a6abfeb04cb66ae33b26b6353edad2aecf39365
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
| |
Change-Id: I794eed65730b8a054df8ebcf666401fd266c59c2
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The corresponding WebUI is chrome://webrtc-logs
It only makes sense with the hangout services extension. It seems to be
only useable with meet.google.com. The behavior is same for Chrome.
Uploading logs to Google is disabled in the Chromium patch. It is an
extension API functionality. The WebUI only lists the previously
generated logs.
Pulls in the following changes:
1dda5314b02 Enable webrtcLoggingPrivate extension API for hangout extension
7d71aca116d FIXUP: Enable webrtcLoggingPrivate extension API for hangout extension
Change-Id: I455fce7c8081e71967e55ab1f889df6ef91ed253
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
| |
At least that pkg-config can resolve it.
Change-Id: Id0e0a37ad4aa85f11dfdd74bc174d17d36ed4ce2
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
|
|
|
|
|
|
|
| |
Also removes another private dependency
Change-Id: Ie0a671c66f9aa49e7001c44e69bf94e11ab058a5
Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
|
|
|
|
|
|
|
| |
We require node.js now.
Change-Id: I9f0bbd7c374102e2a5d4a256237b89977d073980
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
|
|
|
|
|
|
|
| |
Cancel previous search if not yet finished.
Change-Id: Ie17b2b773bc9d23970c8178ef8be47c19cd768a3
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty 19c6bab8..471e102b:
> [Backport] CVE-2021-21123: Insufficient data validation in File System API (3/3)
> [Backport] CVE-2021-21123: Insufficient data validation in File System API (2/3)
> [Backport] CVE-2021-21123(1/3), CVE-2021-21125, CVE-2021-21129,CVE-2021-21130, CVE-2021-21131, CVE-2021-21141
> [Backport] CVE-2021-21137: Inappropriate implementation in DevTools
> [Backport] CVE-2021-21135: Inappropriate implementation in Performance API
Change-Id: Icb814f643421b814a0065c859942d9c6000695eb
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Ammends a05bb73747. Since request processing is asynchronous, resolve
interceptors right before actual interception point to accommodate
cases where interceptor on profile or page was replaced or uninstalled
before all instantiated InterceptedRequest's are processed.
Effectively, this doesn't send url requests to uninstalled interceptors.
Fixes: QTBUG-86286
Change-Id: Iaf55e5ef99d62b55f7304ee68a0c89a1469fd86f
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
| |
Change-Id: I9eac9537b60ba35a53e85c6437bb67b59bf0e35d
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
|
|
|
|
|
| |
Change-Id: Id4790b38b5a8dafeba18dac3142f6e0693330652
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty f9845463..19c6bab8:
> [Backport] Security bug 1097499
> [Backport] CVE-2021-21128: Heap buffer overflow in Blink
> [Backport] CVE-2021-21127: Insufficient policy enforcement in extensions
> [Backport] CVE-2021-21126: Insufficient policy enforcement in extensions
> [Backport] CVE-2020-16044: Use after free in WebRTC [3/3]
> [Backport] CVE-2020-16044: Use after free in WebRTC [2/3]
> [Backport] CVE-2020-16044: Use after free in WebRTC [1/3]
> [Backport] CVE-2021-21121: Use after free in Omnibox
> [Backport] CVE-2021-21120: Use after free in WebSQL
> [Backport] CVE-2021-21119: Use after free in Media
> FIXUP: Fix build with msvc2019 16.8.0
> FIXUP: Make GpuSwitchingManager::RemoveObserver() thread safe
Change-Id: Ib77701fa61c9e05d1c29485edb12da5c016982ad
Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
|
|
|
|
|
|
|
|
|
|
|
| |
Set most of the exceptions chrome does, and register the performance
manager earlier where chrome does.
Needed for future extensions.
Change-Id: I0d16882d87096bedb24abe1341a008d1fdacf6db
Reviewed-by: Szabolcs David <davidsz@inf.u-szeged.hu>
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
For triggering an error page 3 conditions should be fulfilled:
- main frame navigation
- the page's document is empty
- the HTTP status code indicates an error
This fix adds check for the empty document and sends loadFinished signal
without expecting an error page if the document is not empty.
Fixes: QTBUG-90517
Change-Id: I6463d75fb5e682932feca64b0f059f9aa475795c
Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
|
|
|
|
|
|
|
|
| |
It was removed in Chromium 73:
https://chromium-review.googlesource.com/c/chromium/src/+/1373841
Change-Id: I3755f50d865b22f757714ab50add1bccf463421f
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
| |
Also record some actions in WebContentsAdapter. The list is far from
complete but these seemed obvious.
Change-Id: I7dcddeef416efd6fb26618381a83d2b132b98d83
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
| |
Change-Id: Ia90172f47f0f6349de9a21f6567bda92a156216c
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Pulls in the following changes:
* f9845463789 FIXUP: Fixes for jumbo build
* 50a83c68629 [Backport] CVE-2021-21118 (3/3)
* d964369bee6 [Backport] CVE-2021-21118 (2/3)
* 85b0d34712c [Backport] CVE-2021-21118 (1/3)
Change-Id: I06d55d9f27cb99815174aef44cb959af189f6dfd
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
|
|
|
|
|
|
|
|
|
| |
Add description for the WebEngineLoadRequest QML type too.
Task-number: QTBUG-57636
Change-Id: I021af3c49e8235b04ce60efa6143b2e547fc65ad
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
Reviewed-by: Leena Miettinen <riitta-leena.miettinen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Register browser interface binders for PDF viewer. Copied back this
logic from the guest view implementation (from dev) to enable usage
of chrome.resourcesPrivate API in the PDF viewer of 5.15.
- Implement template replacements for extensions. Replace i18n
placeholders in the PDF viewer HTML to prevent syntax issues and
support localization.
Task-number: QTBUG-90035
Change-Id: Ief5fc536435e5c183dc987462d89311dfa429970
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
| |
Task-number: QTBUG-89753
Change-Id: I89552671de0127d4e74ede4ca5f7fc4eab8cae6d
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
| |
Change-Id: I6fa93ca7ee18f2ac6ae64d59c4dba30b82a6aa54
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
| |
This is a workaround to fix build with ccache.
Increasing the open files limit is not necessary with gold and lld linker.
Prepending ulimit before the linker command breaks the build if Qt is
configured to be built with ccache.
Change-Id: I847d9f0a9a36f6a2480ea6b0a11f9973bae942e3
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The implementation could lead to heap corruption because the drive
letter string was not large enough for the drive letter plus the null-
termination byte.
Original patch by Tamas Karpati.
Change-Id: I012057c48b071a453ef8cda926041d3e9db78555
Fixes: QTBUG-90347
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit 3fb215dab139fd7b61473ce3fe1058b87a6b4fe3)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Chromium uses the default download file name if the scheme of
a file to download is either about or data, as the file name extraction
methods do not seems to work for those.
Mimic this behavior in Qt WebEngine as well.
Fixes: QTBUG-90355
Change-Id: I14b8c4f64559500d3f231dd26533a5947bf94bc3
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
|
|
|
|
|
| |
Change-Id: Icad495c3bf144a4da53b2a60585dabb3fc36d3d6
Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
|
|
|
|
|
|
|
|
|
|
|
| |
Fix crash for locales, for which there is no pak data file (like en-DE).
Match original chromium's implementation for LocaleDataPakExists by
checking if path for file exists in order to not to try to load invalid
non-existent pack file.
Change-Id: I47c5cc97c09bdf8e78dcff024d82796d4c419f2c
Fixes: QTBUG-90490
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
|
|
|
|
|
|
|
|
|
|
|
| |
[ChangeLog] Enable hangout services extension and implement its
WebRTC desktop capture extension API dependency.
Fixes: QTBUG-85731
Task-number: QTBUG-51185
Task-number: QTBUG-61676
Change-Id: I7a659c2b0039243ac8d8c58685716ffc55265e3b
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
| |
Match the already used versions.
Change-Id: I8ade97aa38fdc52337a32a0ca92664bb50a0e611
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
|
|
|
|
|
|
|
| |
87-based requires 10.0.19041 windows sdk.
Change-Id: I9c6d09e85836367ebcf9fbb2b8b4d574180d7de5
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
| |
Nodejs can be installed in "Program Files"
Change-Id: Ic274c6a9e11c56649a16e5e7b7a1bf116b4475fe
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
| |
In case there is no window system with qml simply use
screen rect. This will also work well with rotated view
(for non windowing system).
Task-number: QTBUG-86034
Task-number: QTBUG-89358
Change-Id: Ic042d766d661c8322422b194c08b58609992961b
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
| |
In qml when on platforms without windowing system
we need to send show notification.
Note this was not required with old compositor, since
it was hooked up differently than viz.
Task-number: QTBUG-86034
Change-Id: I3ecdc033802d59c15637bc0e48961cd7748b1c6b
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
| |
Change-Id: Ic7cff2556945272761288fedd271796dbf240cb5
Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
|