diff options
Diffstat (limited to 'libre/qutebrowser/webkit-warning.patch')
| -rw-r--r-- | libre/qutebrowser/webkit-warning.patch | 22 |
1 files changed, 14 insertions, 8 deletions
diff --git a/libre/qutebrowser/webkit-warning.patch b/libre/qutebrowser/webkit-warning.patch index 97994870c..e659e68ee 100644 --- a/libre/qutebrowser/webkit-warning.patch +++ b/libre/qutebrowser/webkit-warning.patch @@ -1,8 +1,8 @@ diff --git a/qutebrowser/html/warning-webkit.html b/qutebrowser/html/warning-webkit.html -index e87597b..ada806f 100644 +index 7fc2290..938762c 100644 --- a/qutebrowser/html/warning-webkit.html +++ b/qutebrowser/html/warning-webkit.html -@@ -2,8 +2,6 @@ +@@ -2,81 +2,14 @@ {% block content %} <h1>{{ title }}</h1> @@ -11,7 +11,13 @@ index e87597b..ada806f 100644 <p>You're using qutebrowser with the QtWebKit backend.</p> -@@ -17,66 +15,6 @@ unpatched vulnerabilities. Please use it carefully and avoid visiting untrusted +-<p>While QtWebKit has gained some traction again recently, its latest release +-(5.212.0 Alpha 3) is still based on an old upstream WebKit. It also lacks +-various security features (process isolation/sandboxing) present in +-QtWebEngine. From the upstream release notes:</p> +- + <blockquote>WARNING: This release is based on old WebKit revision with known + unpatched vulnerabilities. Please use it carefully and avoid visiting untrusted websites and using it for transmission of sensitive data. Wait for new release from qtwebkit-dev branch to use it with untrusted content.</blockquote> @@ -68,15 +74,15 @@ index e87597b..ada806f 100644 -<p><b>QtWebEngine being unavailable on Parabola</b>: Claims of Parabola -developers about QtWebEngine being "non-free" have repeatedly been disputed, -and so far nobody came up with solid evidence about that being the case. Also, --note that their qutebrowser package was often outdated in the past (even --qutebrowser security fixes took months to arrive there). You might be better --off chosing an <a href="https://qutebrowser.org/doc/install.html#tox"> --alternative install method</a>.</p> +-note that their qutebrowser package is usually very outdated (even qutebrowser +-security fixes took months to arrive there). You might be better off chosing an +-<a href="https://qutebrowser.org/doc/install.html#tox"> alternative install +-method</a>.</p> - -<p><b>White flashing between loads with a custom stylesheet</b>: This doesn't -seem to happen with <span class="mono">qt.process_model = single-process</span> -set. However, note that that setting comes with decreased security and -stability, but QtWebKit doesn't have any process isolation at all.</p> +<p>If that bothers you, it is recommended that you use another web browser instead, -+such as IceCat or IceWeasel.</p> ++such as IceCat, IceWeasel, or Epiphany.</p> {% endblock %} |