summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Remove ResourceTypeSubFrame check after website update5.15.3Kirill Burtsev2021-06-111-12/+0
| | | | | | | | | | | There are no more sub frame resources under test url, so nothing to check for firstPartyUrl and initiator. Change-Id: I12ddf33ec2909d9a427a9819725d941960575612 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit a282c7a36f8707e0777df201855ef0a8a1980de1) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit e7d56d6c0a942a89bd9d497b57cbb0f70e39bb27)
* Update Chromiumv5.15.3-lts-lgplv5.15.3-ltsMichael Brüning2021-02-241-0/+0
| | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty 4cb55651..d77379c5: > [Backport] CVE-2021-21153: Stack overflow in GPU Process > [Backport] CVE-2021-21152: Heap buffer overflow in Media > [Backport] CVE-2021-21157: Use after free in Web Sockets > [Backport] CVE-2021-21156: Heap buffer overflow in V8 > [Backport] Security bug 1171954 > [Backport] CVE-2021-21149: Stack overflow in Data Transfer > [Backport] Dependency for CVE-2021-21150: Use after free in Downloads [1/1] > [Backport] CVE-2021-21150: Use after free in Downloads > FIXUP: [Backport] CVE-2021-21149: Stack overflow in Data Transfer > FIXUP: [Backport] CVE-2021-21149: Stack overflow in Data Transfer Task-number: QTBUG-90575 Pick-to: 5.15 Change-Id: I37640b05028616fae93e1bb301d92968ef24b0b1 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix product-path for 5.15.3Allan Sandfeld Jensen2021-02-231-1/+1
| | | | | Change-Id: Iad9a3fa1df35e7c1dfeee12398d053488803f450 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Do not flush messages form profile destructorMichal Klocek2021-02-232-2/+3
| | | | | | | | | | | | | Flush ui messages in profile adapter instead, otherwise we will refer to already destroyed adapter (which we track by qpointer), if some ui messages are being processed. Note profile adapter owns profile so it should be fine to notify about coming browser context destruction. Pick-to: 5.15 Change-Id: Idaa29a459c984ca73d1f5f9ca61b96c9b4017259 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Avoid accessing profileAdapter when profile is shutting downAllan Sandfeld Jensen2021-02-181-0/+8
| | | | | | | | Task-number: QTBUG-91187 Change-Id: Icaef781025791a94c0e5dd85039c33b8ae45de99 Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit 0b5f110234256eabaa264189d9117069f2a2d144) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Package devtools inspector overlayAllan Sandfeld Jensen2021-02-181-0/+2
| | | | | | | | | | | It is now in a separate file, and will silently fail by just breaking the overlay highlights. Fixes: QTBUG-91178 Change-Id: If1787671962bd8ee50fae6c60f7c46692ab51c02 Reviewed-by: Michael Brüning <michael.bruning@qt.io> (cherry picked from commit 50524f176b6ecd812f413f85703c7f410c7e71a3) Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Remove QtPdf dependency on nss at build-timeAllan Sandfeld Jensen2021-02-174-2/+2
| | | | | Change-Id: I653dee03adcad422d1210fda48bdd5b701382b00 Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* Fix popup positionMichal Klocek2021-02-161-28/+16
| | | | | | | | | This patch fixes popup position when popup have parent window. Make simple offset calculation and add rotated pupups support in another patch. Change-Id: Id53524375eeecbc316dc6f6bef7f32669a72beb3 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix crash on exit in quicknanobrowser when popupMichal Klocek2021-02-161-1/+0
| | | | | | | | | | | | | Quicknanobrowser uses "onClosing: destory()" on main window. This however will end up badly when there is open popup, since calling destroy on exit immediately deletes WebContents, while popup is still not closed. Let the application first close/destroy popup and then main qquickwindow. Change-Id: I9c3974cd0f6126558b876cb0199928797e3f7a47 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix crashes on BrowserContext destructionMichal Klocek2021-02-164-6/+15
| | | | | | | | | | | | | When destroying WebEngineProile we send notifications like content::BrowserContext::NotifyWillBeDestroyed, this works well with global profile where there is no more render process around, moreover we still pump ui messages before we destroy profile. However, with user profiles we destruct BorwserContext and there can be still RenderProcessHost using it. Flush messages before running BrowserContext destructor. Change-Id: I4d8cda2bc1e2ae3dc0781bf3570a36db7d07223a Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix mad popup qquickwindows on waylandMichal Klocek2021-02-163-5/+7
| | | | | | | | | | | | | | | | | | | | On wayland with weston the popup quickwindow should have parent otherwise it gets into 'mad' mode and jumps around the screen. This also fixes similar issue on some embedded x11 setups. Adding parent brakes positioning of popups, but the fix is done in followup patch. This patch also has a regression, closing application during opened comobox will cause crash, however before this patch application simply did not remove render process or "hanged" on exit. This issue is also handled in follow up patches. Change-Id: I876b9a5b58a731eee95f30a52a3c2705730631da Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumMichael Brüning2021-02-161-0/+0
| | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty a38752bf..391a8eef6: > Fix memory thresholds over 20GiB > [Backport] Security bug 1162198 > [Backport] Security bug 1161654 > [Backport] CVE-2021-21140: Uninitialized Use in USB [1/2] > [Backport] CVE-2021-21140: Uninitialized Use in USB [2/2] > [Backport] CVE-2021-21132: Inappropriate implementation in DevTools > [Backport] Security bug 1135594 > Make nss certificates disableable for QtPdf > [Backport] Security bug 1144646 > [Backport] WebRTC bug 12105 > [Backport] Security bug 1127774 > [Backport] Dependendy for security bug 937131 (1/1) > [Backport] Security bug 937131 > [Backport] CVE-2021-21122: Use after free in Blink Task-number: QTBUG-90575 Change-Id: I6761314f7b2da13854362c39fbb80ab0db138fb2 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix build with Qt 5.12Allan Sandfeld Jensen2021-02-151-1/+1
| | | | | | | No QMap::insert as set or append. Change-Id: Icb05e43c4cb3d45171a164bdda7420d066eab79e Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
* Update ChromiumAllan Sandfeld Jensen2021-02-121-0/+0
| | | | | | | | | | | Submodule src/3rdparty 1711a9c9..a38752bf: > [Backport] CVE-2021-21147: Inappropriate implementation in Skia > [Backport] CVE-2021-21146: Use after free in Navigation > [Backport] CVE-2021-21145: Use after free in Fonts > [Backport] CVE-2021-21148: Heap buffer overflow in V8 Change-Id: I4955f682de0e741a0bf279218fb3ce2efa9f8aac Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Fix crash on meet.google.comSzabolcs David2021-02-111-2/+2
| | | | | | | | | | | This site crashes after 0185f41 when it tries to use the Hangouts extension. Background WebContent of this extension (and future guest views) doesn't have a corresponding WebContentsAdapterClient. Change-Id: I2028372a176a7194bf037093f9364d942bef969a Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu> Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update tst_QWebEngineView::webUIURLs auto testPeter Varga2021-02-101-6/+11
| | | | | | | | Remove URLs of removed WebUIs. Some removed URLs are just not for WebUI. Also add new ones that are available with Chromium 87. Change-Id: I2a749b5ff20621f2fc4cb168a2a40b571d79bdd0 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Add tracing UI resourcesPeter Varga2021-02-104-2/+7
| | | | | | | | | | | Also add third party python dependencies of tracing to the snapshot. Pulls in the following changes: a7c1c17e0b9 [Revert] Do not bundle the tracing UI resources 1711a9c9bf4 Enable build of tracing UI Change-Id: I0a6abfeb04cb66ae33b26b6353edad2aecf39365 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Feat support mips64el platform CPU(loongson 3A4000)Ma Aiguo2021-02-102-0/+2
| | | | | Change-Id: I794eed65730b8a054df8ebcf666401fd266c59c2 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Enable webrtc logging and the corresponding WebUIPeter Varga2021-02-0911-9/+217
| | | | | | | | | | | | | | | | | | The corresponding WebUI is chrome://webrtc-logs It only makes sense with the hangout services extension. It seems to be only useable with meet.google.com. The behavior is same for Chrome. Uploading logs to Google is disabled in the Chromium patch. It is an extension API functionality. The WebUI only lists the previously generated logs. Pulls in the following changes: 1dda5314b02 Enable webrtcLoggingPrivate extension API for hangout extension 7d71aca116d FIXUP: Enable webrtcLoggingPrivate extension API for hangout extension Change-Id: I455fce7c8081e71967e55ab1f889df6ef91ed253 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* QtPdf apparently depends on libnss on linuxAllan Sandfeld Jensen2021-02-092-0/+2
| | | | | | | At least that pkg-config can resolve it. Change-Id: Id0e0a37ad4aa85f11dfdd74bc174d17d36ed4ce2 Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Remove more leftovers of the old compositorAllan Sandfeld Jensen2021-02-087-46/+6
| | | | | | | Also removes another private dependency Change-Id: Ie0a671c66f9aa49e7001c44e69bf94e11ab058a5 Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
* Add nodejs error messageAllan Sandfeld Jensen2021-02-081-0/+1
| | | | | | | We require node.js now. Change-Id: I9f0bbd7c374102e2a5d4a256237b89977d073980 Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Update searches fasterAllan Sandfeld Jensen2021-02-081-6/+6
| | | | | | | Cancel previous search if not yet finished. Change-Id: Ie17b2b773bc9d23970c8178ef8be47c19cd768a3 Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
* Update ChromiumAllan Sandfeld Jensen2021-02-081-0/+0
| | | | | | | | | | | | | Submodule src/3rdparty 19c6bab8..471e102b: > [Backport] CVE-2021-21123: Insufficient data validation in File System API (3/3) > [Backport] CVE-2021-21123: Insufficient data validation in File System API (2/3) > [Backport] CVE-2021-21123(1/3), CVE-2021-21125, CVE-2021-21129,CVE-2021-21130, CVE-2021-21131, CVE-2021-21141 > [Backport] CVE-2021-21137: Inappropriate implementation in DevTools > [Backport] CVE-2021-21135: Inappropriate implementation in Performance API Change-Id: Icb814f643421b814a0065c859942d9c6000695eb Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu> Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
* Resolve installed interceptors right before interception pointKirill Burtsev2021-02-085-118/+261
| | | | | | | | | | | | Ammends a05bb73747. Since request processing is asynchronous, resolve interceptors right before actual interception point to accommodate cases where interceptor on profile or page was replaced or uninstalled before all instantiated InterceptedRequest's are processed. Effectively, this doesn't send url requests to uninstalled interceptors. Fixes: QTBUG-86286 Change-Id: Iaf55e5ef99d62b55f7304ee68a0c89a1469fd86f Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Remove frame metadata observer (RenderWidgetHostViewQt) on destroyKirill Burtsev2021-02-064-0/+29
| | | | | Change-Id: I9eac9537b60ba35a53e85c6437bb67b59bf0e35d Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
* Fix devtools page resource loading as raw data instead of html stringKirill Burtsev2021-02-061-1/+1
| | | | | Change-Id: Id4790b38b5a8dafeba18dac3142f6e0693330652 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumAllan Sandfeld Jensen2021-02-051-0/+0
| | | | | | | | | | | | | | | | | | | Submodule src/3rdparty f9845463..19c6bab8: > [Backport] Security bug 1097499 > [Backport] CVE-2021-21128: Heap buffer overflow in Blink > [Backport] CVE-2021-21127: Insufficient policy enforcement in extensions > [Backport] CVE-2021-21126: Insufficient policy enforcement in extensions > [Backport] CVE-2020-16044: Use after free in WebRTC [3/3] > [Backport] CVE-2020-16044: Use after free in WebRTC [2/3] > [Backport] CVE-2020-16044: Use after free in WebRTC [1/3] > [Backport] CVE-2021-21121: Use after free in Omnibox > [Backport] CVE-2021-21120: Use after free in WebSQL > [Backport] CVE-2021-21119: Use after free in Media > FIXUP: Fix build with msvc2019 16.8.0 > FIXUP: Make GpuSwitchingManager::RemoveObserver() thread safe Change-Id: Ib77701fa61c9e05d1c29485edb12da5c016982ad Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
* Match Chrome behavior closer with extensionsAllan Sandfeld Jensen2021-02-054-6/+54
| | | | | | | | | | | Set most of the exceptions chrome does, and register the performance manager earlier where chrome does. Needed for future extensions. Change-Id: I0d16882d87096bedb24abe1341a008d1fdacf6db Reviewed-by: Szabolcs David <davidsz@inf.u-szeged.hu> Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
* Fix loadFinished signal if page has content but server sends HTTP errorPeter Varga2021-02-0510-64/+153
| | | | | | | | | | | | | | For triggering an error page 3 conditions should be fulfilled: - main frame navigation - the page's document is empty - the HTTP status code indicates an error This fix adds check for the empty document and sends loadFinished signal without expecting an error page if the document is not empty. Fixes: QTBUG-90517 Change-Id: I6463d75fb5e682932feca64b0f059f9aa475795c Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
* Remove remains of chrome://flashPeter Varga2021-02-042-5/+0
| | | | | | | | It was removed in Chromium 73: https://chromium-review.googlesource.com/c/chromium/src/+/1373841 Change-Id: I3755f50d865b22f757714ab50add1bccf463421f Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Enable chrome://user-actions WebUIPeter Varga2021-02-044-5/+30
| | | | | | | | Also record some actions in WebContentsAdapter. The list is far from complete but these seemed obvious. Change-Id: I7dcddeef416efd6fb26618381a83d2b132b98d83 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Clean up header includes and forward declarations in corePeter Varga2021-02-0415-176/+31
| | | | | Change-Id: Ia90172f47f0f6349de9a21f6567bda92a156216c Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumSzabolcs David2021-02-031-0/+0
| | | | | | | | | | | | | Pulls in the following changes: * f9845463789 FIXUP: Fixes for jumbo build * 50a83c68629 [Backport] CVE-2021-21118 (3/3) * d964369bee6 [Backport] CVE-2021-21118 (2/3) * 85b0d34712c [Backport] CVE-2021-21118 (1/3) Change-Id: I06d55d9f27cb99815174aef44cb959af189f6dfd Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu> Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* FIXUP: Doc: Describe the WebEngineView.LoadStoppedStatus enum valuePeter Varga2021-02-031-3/+6
| | | | | | | | | Add description for the WebEngineLoadRequest QML type too. Task-number: QTBUG-57636 Change-Id: I021af3c49e8235b04ce60efa6143b2e547fc65ad Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> Reviewed-by: Leena Miettinen <riitta-leena.miettinen@qt.io>
* Start supporting chrome.resourcesPrivate APISzabolcs David2021-01-264-3/+70
| | | | | | | | | | | | | - Register browser interface binders for PDF viewer. Copied back this logic from the guest view implementation (from dev) to enable usage of chrome.resourcesPrivate API in the PDF viewer of 5.15. - Implement template replacements for extensions. Replace i18n placeholders in the PDF viewer HTML to prevent syntax issues and support localization. Task-number: QTBUG-90035 Change-Id: Ief5fc536435e5c183dc987462d89311dfa429970 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Add back prefers-color-scheme supportPeter Varga2021-01-261-17/+10
| | | | | | Task-number: QTBUG-89753 Change-Id: I89552671de0127d4e74ede4ca5f7fc4eab8cae6d Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Remove even more remains of non network service codePeter Varga2021-01-252-5/+0
| | | | | Change-Id: I6fa93ca7ee18f2ac6ae64d59c4dba30b82a6aa54 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Do not set open files limit for linking if not necessaryPeter Varga2021-01-251-2/+4
| | | | | | | | | | | This is a workaround to fix build with ccache. Increasing the open files limit is not necessary with gold and lld linker. Prepending ulimit before the linker command breaks the build if Qt is configured to be built with ccache. Change-Id: I847d9f0a9a36f6a2480ea6b0a11f9973bae942e3 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Leave room for the null-termination byte when checking remote drive pathMichael Brüning2021-01-221-1/+1
| | | | | | | | | | | | | | The implementation could lead to heap corruption because the drive letter string was not large enough for the drive letter plus the null- termination byte. Original patch by Tamas Karpati. Change-Id: I012057c48b071a453ef8cda926041d3e9db78555 Fixes: QTBUG-90347 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 3fb215dab139fd7b61473ce3fe1058b87a6b4fe3) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Do not extract download file names from certain url schemesMichael Brüning2021-01-222-2/+52
| | | | | | | | | | | | Chromium uses the default download file name if the scheme of a file to download is either about or data, as the file name extraction methods do not seems to work for those. Mimic this behavior in Qt WebEngine as well. Fixes: QTBUG-90355 Change-Id: I14b8c4f64559500d3f231dd26533a5947bf94bc3 Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Support devtools close buttonAllan Sandfeld Jensen2021-01-222-1/+5
| | | | | Change-Id: Icad495c3bf144a4da53b2a60585dabb3fc36d3d6 Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
* Allow to fallback to default locale for non existent data packsKirill Burtsev2021-01-201-1/+3
| | | | | | | | | | | Fix crash for locales, for which there is no pak data file (like en-DE). Match original chromium's implementation for LocaleDataPakExists by checking if path for file exists in order to not to try to load invalid non-existent pack file. Change-Id: I47c5cc97c09bdf8e78dcff024d82796d4c419f2c Fixes: QTBUG-90490 Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* Enable hangout services extensionPeter Varga2021-01-2024-51/+510
| | | | | | | | | | | [ChangeLog] Enable hangout services extension and implement its WebRTC desktop capture extension API dependency. Fixes: QTBUG-85731 Task-number: QTBUG-51185 Task-number: QTBUG-61676 Change-Id: I7a659c2b0039243ac8d8c58685716ffc55265e3b Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update Chromium versionAllan Sandfeld Jensen2021-01-192-2/+2
| | | | | | | Match the already used versions. Change-Id: I8ade97aa38fdc52337a32a0ca92664bb50a0e611 Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
* Update minimum windows sdkMichal Klocek2021-01-182-3/+3
| | | | | | | 87-based requires 10.0.19041 windows sdk. Change-Id: I9c6d09e85836367ebcf9fbb2b8b4d574180d7de5 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix nodejs detected pathMichal Klocek2021-01-180-0/+0
| | | | | | | Nodejs can be installed in "Program Files" Change-Id: Ic274c6a9e11c56649a16e5e7b7a1bf116b4475fe Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix position of popup on qmlMichal Klocek2021-01-182-8/+6
| | | | | | | | | | | In case there is no window system with qml simply use screen rect. This will also work well with rotated view (for non windowing system). Task-number: QTBUG-86034 Task-number: QTBUG-89358 Change-Id: Ic042d766d661c8322422b194c08b58609992961b Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix blank popups in qmlMichal Klocek2021-01-181-0/+1
| | | | | | | | | | | In qml when on platforms without windowing system we need to send show notification. Note this was not required with old compositor, since it was hooked up differently than viz. Task-number: QTBUG-86034 Change-Id: I3ecdc033802d59c15637bc0e48961cd7748b1c6b Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix some warningsPeter Varga2021-01-162-2/+2
| | | | | Change-Id: Ic7cff2556945272761288fedd271796dbf240cb5 Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>