On 7/20/22 15:56, Michael Catanzaro wrote:
> On Wed, Jul 20 2022 at 04:29:40 PM +0200, Kevin Kofler via devel
> wrote:
>> That is not a reasonable solution. Those applications need embedded
>> HTML in
>> the UI, not a separate browser window. And it does not help at all if
>> the
>> browser tha
Michael Catanzaro wrote:
> I presume it uses a sandboxed multiprocess architecture anyway, like
> upstream Chromium. Is it not true?
>
> If so, it's surely one of the most secure packages we have in Fedora.
> Of course, that's no good excuse to fall behind on security updates.
> But I have high con
On Wed, Jul 20 2022 at 09:00:28 PM +0200, Kevin Kofler via devel
wrote:
(The fact that
these fixes are not included in the betas, but only dropped into the
stable
release, also makes the beta testing quite pointless and compromises
the
stability of the stable releases.)
A little feedback o
On Wed, Jul 20 2022 at 04:29:40 PM +0200, Kevin Kofler via devel
wrote:
That is not a reasonable solution. Those applications need embedded
HTML in
the UI, not a separate browser window. And it does not help at all if
the
browser that is shelled out to itself uses QtWebEngine.
I presume it u
Vitaly Zaitsev via devel wrote:
> On 20/07/2022 16:50, Kevin Kofler via devel wrote:
>> There is a lag, but it is less than the average lag we add in Fedora.
>>
>> E.g., the security fixes from Chromium 100 were backported to
>> qtwebengine- chromium git after 1 month, and the release was tagged 2
On 20/07/2022 16:50, Kevin Kofler via devel wrote:
There is a lag, but it is less than the average lag we add in Fedora.
E.g., the security fixes from Chromium 100 were backported to qtwebengine-
chromium git after 1 month, and the release was tagged 2 weeks later.
This is not about the Fedora
PS:
Kevin Kofler via devel wrote:
> (*) These features require the KDE KF5/Plasma integration plugin, i.e.,
> the optional falkon-kde subpackage. Everything else is built-in into
> Falkon and/or Qt.
The gopher:// example also requires the kio_gopher package, which is not
installed by default for
Demi Marie Obenour wrote:
> What advantage does Falkon have over upstream Chromium? Serious question.
Better desktop integration. (Especially KDE Plasma integration, but there is
also a gnome-keyring plugin available. The KF5/Plasma integration plugin
uses KWallet, of course, but also does othe
On Wed, Jul 20, 2022 17:49:05 +0200, Kevin Kofler via devel wrote:
> Hi Ankur,
Hi Kevin,
>
> If you want to go straight for 5.15.10, then the first step would be to get
> 5.15.10 into Rawhide, and then go through the same steps above to push
> 5.15.10 to the stable releases.
Thanks for that. I
Hi Ankur,
Ankur Sinha wrote:
> On Wed, Jul 20, 2022 03:58:41 +0200, Kevin Kofler via devel wrote:
>> So, since all current maintainers of qt5-qtwebengine, including me, are
>> failing badly at keeping the package up to date with security fixes, this
>> is an urgent plea for help. The current situa
On 7/20/22 10:29, Kevin Kofler via devel wrote:
> Demi Marie Obenour wrote:
>> I can’t help with maintenance, but I honestly wonder if some of
>> these programs could be modified to shell out to a browser subprocess.
>
> That is not a reasonable solution. Those applications need embedded HTML in
Hi Kevin,
On Wed, Jul 20, 2022 03:58:41 +0200, Kevin Kofler via devel wrote:
> So, since all current maintainers of qt5-qtwebengine, including me, are
> failing badly at keeping the package up to date with security fixes, this is
> an urgent plea for help. The current situation is not acceptable
Vitaly Zaitsev via devel wrote:
> QtWebEngine is an extremely vulnerable thing due to a major lag after
> WebKit/Blink security patches.
There is a lag, but it is less than the average lag we add in Fedora.
E.g., the security fixes from Chromium 100 were backported to qtwebengine-
chromium git af
Demi Marie Obenour wrote:
> I can’t help with maintenance, but I honestly wonder if some of
> these programs could be modified to shell out to a browser subprocess.
That is not a reasonable solution. Those applications need embedded HTML in
the UI, not a separate browser window. And it does not h
On 20/07/2022 11:57, Fabio Valentini wrote:
Just to clarify, epiphany and other GTK- and WebKit-based browsers
don't use QtWebEngine, but WebKitGTK.
Oops, my mistake. Ofc only KDE/Qt apps is using QtWebEngine for
rendering HTML.
As far as I know, it doesn't suffer from the same support / la
On Wed, Jul 20, 2022 at 11:04 AM Vitaly Zaitsev via devel
wrote:
>
> On 20/07/2022 08:55, Demi Marie Obenour wrote:
> > I also wonder if some features of QtWebEngine, such as the V8 JIT
> > compiler or even scripting as a whole, ought to be proactively
> > disabled.
>
> QtWebEngine is an extremely
On 20/07/2022 08:55, Demi Marie Obenour wrote:
I also wonder if some features of QtWebEngine, such as the V8 JIT
compiler or even scripting as a whole, ought to be proactively
disabled.
QtWebEngine is an extremely vulnerable thing due to a major lag after
WebKit/Blink security patches. I even
On 7/19/22 21:58, Kevin Kofler via devel wrote:
> Hi,
>
> QtWebEngine is used as the HTML component for many Qt applications,
> including large parts of the KDE software universe. It is used by web
> browsers such as Falkon, but also, e.g., by KMail/Kontact.
>
> The version that is currently (s
Hi,
QtWebEngine is used as the HTML component for many Qt applications,
including large parts of the KDE software universe. It is used by web
browsers such as Falkon, but also, e.g., by KMail/Kontact.
The version that is currently (still) used the most is the Qt 5 version.
There is also a Qt 6
19 matches
Mail list logo
