1. 02 Dec, 2021 6 commits
  2. 01 Dec, 2021 1 commit
  3. 30 Nov, 2021 5 commits
    • Michael Catanzaro's avatar
      Fix web applications that use non-Latin characters in the name · f060a06f
      Michael Catanzaro authored
      Users can input whatever they want for the name of the web app, as long
      as it is valid UTF-8. Since a72d21d7 we
      have passed this along straight to GApplication without sanitizing it to
      ensure it can safely be used in a GApplication ID. If the user decides
      to use any character in the app name besides Latin alphanumeric
      characters, we are doomed. This has never worked properly, but
      previously all we saw were criticals from GApplication as it dropped our
      bogus app ID. But since WebKitGTK 2.32, WebKit actually refuses to start
      a sandboxed subprocess without a valid app ID, as it should.
      
      The complication here is that we cannot simply decide to create better
      app IDs for existing web apps: the app ID must exactly match the desktop
      file, and we want it to match the profile directory name too. So let's
      assume that non-Latin web apps were previously broken, hope that users
      delete any such broken web apps rather than leak...
      f060a06f
    • Alexander Mikhaylenko's avatar
      location-entry: Stop subclassing GtkOverlay · 0e8c0e1a
      Alexander Mikhaylenko authored
      Part-of: <!1035>
      0e8c0e1a
    • Alexander Mikhaylenko's avatar
      web-app-utils: Stop setting default icon · e2de0e42
      Alexander Mikhaylenko authored
      Turns out it doesn't work even in GTK3, and in GTK4 it won't be possible
      to do this from a file, only by icon name.
      
      Part-of: <!1035>
      e2de0e42
    • Alexander Mikhaylenko's avatar
      web-app-utils: Don't set program class · 65af8e81
      Alexander Mikhaylenko authored
      This is X11-only and won't be possible in GTK4.
      
      Part-of: <!1035>
      65af8e81
    • Alexander Mikhaylenko's avatar
      file-chooser: Remove preview · 7529e31b
      Alexander Mikhaylenko authored
      This will stop working in GTK4.
      
      Part-of: <!1035>
      7529e31b
  4. 29 Nov, 2021 9 commits
  5. 11 Nov, 2021 1 commit
  6. 21 Sep, 2021 2 commits
  7. 09 Aug, 2021 2 commits
  8. 08 Aug, 2021 1 commit
  9. 04 Jul, 2021 1 commit
    • Vanadiae's avatar
      location-entry: Replace fake eventbox buttons with real ones · 4c790336
      Vanadiae authored
      Currently the reader mode and bookmark icons in the location entry
      are made clickable with the mouse using event boxes. So they are
      kinda "fake buttons" which aren't focusable at all using the
      keyboard.
      
      So to make it easier to access them with the keyboard, and to have
      to way of using their features (keyboard focus and keyboard shortcut),
      this commit replaces the event boxes with proper buttons, styled in
      a way where the buttons are fully invisible to make it look like you
      click or focus a clickable icon, not a button.
      
      This commit also adds a hover color for the entry icons.
      4c790336
  10. 14 Jun, 2021 1 commit
  11. 09 Jun, 2021 1 commit
  12. 04 Jun, 2021 1 commit
  13. 02 Jun, 2021 1 commit
  14. 30 Apr, 2021 1 commit
  15. 29 Apr, 2021 3 commits
  16. 19 Mar, 2021 1 commit
  17. 12 Mar, 2021 1 commit
    • Michael Catanzaro's avatar
      permissions-manager: stop using webkit_security_origin_is_opaque · 8c831ba4
      Michael Catanzaro authored and Alexander Mikhaylenko's avatar Alexander Mikhaylenko committed
      I deprecated this function in WebKit r274270. It no longer does
      anything, so let's stop using it. The original code here was not quite
      right anyway, because it would return -1 whenever any origin is opaque.
      This is not how comparison functions are supposed to work: it means a <
      b and also b < a at the same time, which is outrageous. It just never
      mattered because the security origins used here come from the main
      resource URI, which is never opaque, so we can assert that there is
      always a protocol and host. If we are looking up permissions for a
      protocol that doesn't include a host component, like file:/// or
      something, we have already lost.
      8c831ba4
  18. 21 Feb, 2021 1 commit
  19. 08 Feb, 2021 1 commit