[qutebrowser]: upgrade to v1.11.0

2 files changed, 23 insertions, 17 deletions

diff --git a/libre/qutebrowser/PKGBUILD b/libre/qutebrowser/PKGBUILD
index c473001bd..e246c460c 100644
--- a/libre/qutebrowser/PKGBUILD
+++ b/libre/qutebrowser/PKGBUILD
@@ -9,9 +9,9 @@
 #  - set webkit backend as default
 
 pkgname=qutebrowser
-_pkgver_armv7h=1.10.0 # this could be an 'any' package
-_pkgver_i686=1.10.0   # but our different arches do not always roll at the same speed
-_pkgver_x86_64=1.10.0
+_pkgver_armv7h=1.11.0 # this could be an 'any' package
+_pkgver_i686=1.11.0   # but our different arches do not always roll at the same speed
+_pkgver_x86_64=1.11.0
 eval "pkgver=\$_pkgver_${CARCH}"
 pkgrel=1
 pkgrel+=.par1
@@ -34,15 +34,15 @@ source=("https://github.com/qutebrowser/qutebrowser/releases/download/v$pkgver/q
         "https://github.com/qutebrowser/qutebrowser/releases/download/v$pkgver/qutebrowser-$pkgver.tar.gz.asc"
         "webkit-warning.patch")
 validpgpkeys=("E04E560002401B8EF0E76F0A916EB0C8FD55A072") # Florian Bruhin
-_sha256sums_x86_64=('7ecd7a08380b22eb1268fcc4446ba9d4d005601cb9366097779255edd9683bdf'
+_sha256sums_x86_64=('e2ed9d56aa5db8a0865f7a18d5d0d796d48db161d9c04c03a935dd95e2a4182c'
                     'SKIP'
-                    '8509032254715a09d807ac5901657e66d0d0780e47bbe2b06f634d7b7c9792d0')
-_sha256sums_i686=('7ecd7a08380b22eb1268fcc4446ba9d4d005601cb9366097779255edd9683bdf'
+                    '41da24c74fca7a716a672bab2924e7c1de8e83ad4bdcec3b0ba055baba6459f2')
+_sha256sums_i686=('e2ed9d56aa5db8a0865f7a18d5d0d796d48db161d9c04c03a935dd95e2a4182c'
                   'SKIP'
-                  '8509032254715a09d807ac5901657e66d0d0780e47bbe2b06f634d7b7c9792d0')
-_sha256sums_armv7h=('7ecd7a08380b22eb1268fcc4446ba9d4d005601cb9366097779255edd9683bdf'
+                  '41da24c74fca7a716a672bab2924e7c1de8e83ad4bdcec3b0ba055baba6459f2')
+_sha256sums_armv7h=('e2ed9d56aa5db8a0865f7a18d5d0d796d48db161d9c04c03a935dd95e2a4182c'
                     'SKIP'
-                    '8509032254715a09d807ac5901657e66d0d0780e47bbe2b06f634d7b7c9792d0')
+                    '41da24c74fca7a716a672bab2924e7c1de8e83ad4bdcec3b0ba055baba6459f2')
 eval "sha256sums=(\${_sha256sums_${CARCH}[@]})"
 
 
diff --git a/libre/qutebrowser/webkit-warning.patch b/libre/qutebrowser/webkit-warning.patch
index 97994870c..e659e68ee 100644
--- a/libre/qutebrowser/webkit-warning.patch
+++ b/libre/qutebrowser/webkit-warning.patch
@@ -1,8 +1,8 @@
 diff --git a/qutebrowser/html/warning-webkit.html b/qutebrowser/html/warning-webkit.html
-index e87597b..ada806f 100644
+index 7fc2290..938762c 100644
 --- a/qutebrowser/html/warning-webkit.html
 +++ b/qutebrowser/html/warning-webkit.html
-@@ -2,8 +2,6 @@
+@@ -2,81 +2,14 @@
  
  {% block content %}
  <h1>{{ title }}</h1>
@@ -11,7 +11,13 @@ index e87597b..ada806f 100644
  
  <p>You're using qutebrowser with the QtWebKit backend.</p>
  
-@@ -17,66 +15,6 @@ unpatched vulnerabilities. Please use it carefully and avoid visiting untrusted
+-<p>While QtWebKit has gained some traction again recently, its latest release
+-(5.212.0 Alpha 3) is still based on an old upstream WebKit. It also lacks
+-various security features (process isolation/sandboxing) present in
+-QtWebEngine. From the upstream release notes:</p>
+-
+ <blockquote>WARNING: This release is based on old WebKit revision with known
+ unpatched vulnerabilities. Please use it carefully and avoid visiting untrusted
  websites and using it for transmission of sensitive data. Wait for new release
  from qtwebkit-dev branch to use it with untrusted content.</blockquote>
  
@@ -68,15 +74,15 @@ index e87597b..ada806f 100644
 -<p><b>QtWebEngine being unavailable on Parabola</b>: Claims of Parabola
 -developers about QtWebEngine being "non-free" have repeatedly been disputed,
 -and so far nobody came up with solid evidence about that being the case. Also,
--note that their qutebrowser package was often outdated in the past (even
--qutebrowser security fixes took months to arrive there). You might be better
--off chosing an <a href="https://qutebrowser.org/doc/install.html#tox">
--alternative install method</a>.</p>
+-note that their qutebrowser package is usually very outdated (even qutebrowser
+-security fixes took months to arrive there). You might be better off chosing an
+-<a href="https://qutebrowser.org/doc/install.html#tox"> alternative install
+-method</a>.</p>
 -
 -<p><b>White flashing between loads with a custom stylesheet</b>: This doesn't
 -seem to happen with <span class="mono">qt.process_model = single-process</span>
 -set. However, note that that setting comes with decreased security and
 -stability, but QtWebKit doesn't have any process isolation at all.</p>
 +<p>If that bothers you, it is recommended that you use another web browser instead,
-+such as IceCat or IceWeasel.</p>
++such as IceCat, IceWeasel, or Epiphany.</p>
  {% endblock %}