summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Add changes file for Qt 5.12.3v5.12.35.12.3Antti Kokko2019-04-051-0/+79
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | + f5bad87426599ff52e382aa7e0698a7e4b4b62de Doc: Copy minimal example code into overview page + fd2acd57df7d62490a9a7c1f7b5b60ae50c51ce6 Clarify documentation of QWebEnginePage::title() + 598bfc652edffb047948e01c3c76eb9e0cb7db4e Doc: Always treat \brief as full sentence + 837347e1901086a9757b5aca7e5bbee7b0d8e20e Fix handling of touch icons when it is disabled + 1f77d4709946511b919810354f19875824399096 Fix crash on dynamic_cast in global event filter + 4263778b2cf06dbdba24c7dfe2e54268a50de257 Quicknanobrowser: Hide status bubble properly + 0091ec9046c2c4812dee109fcbfb8372d9435461 Doc: Fix JavaScriptDialogRequest.DialogTypeBeforeUnload enum value + 8600d3d22d86be364a4c29e559dda7990594d0c5 Fix incrementing download ID + ddfa2997939fc4de2993b3e0de2201eca534af61 Fix destruction of qt quick profile after WebEngineContext gets deleted + 56fadb571f32b721d8b99554e6e38692009ec37f Force destruction of webcontent client before profile adapter + 2bf39d83a532a7fa69adc99caafaa523276b03c5 Expose missing translations to lupdate + ac147ec310c71510f8d72d52c3fcec2bfe49b4a4 Fix warning: implicit conversion of NULL constant to 'const int' + eedee8d37bb49239de54011241eaedded5a4c0ce Update Chromium + cbeef3ee920576d668664ca2e0b8a55ae307959a Do not report client redirects as link-clicked + 3efb842be6e2c663b75f2e920fca00dd71da2ce7 Bump version + 01c763c83d0c846164dcb5b69b9343e6ee2ac0b7 Fix tabbing in recipebrowser + c8d11a21c648e87f3560042e1c022f031a6e6519 Fixup focus implementation + 54ac91fd60ba0e84be239cefa1b56a489c420f9e Fix markdown rendering of titles in recipebrowser + 1fe5566c5d494a9a6cea8282c7387b36ef0e4c0b Fix regression in setting background colors + ea65bb32fa988b37d030c3737b8a036f049d1354 Switch to setting 'official build' for non developer builds + 159a1c8da5eb3d105f2fb47d5b15fce8d1010786 Update Chromium + 0d1351132e7b848247fc50343796d22b5dcf1e3b Fix escaped characters in tooltip + dad0cfa3eba01b0dff698f457242f80f6eae4698 Fix style of media audio controls + 1110b9b50e61bf2663e2037ce9e28e74a8943919 Fix timestamp deduplication for Windows Change-Id: I9636039392c9f043885f22aeabb161fc3ce10079 Reviewed-by: Leena Miettinen <riitta-leena.miettinen@qt.io>
* Update ChromiumMichal Klocek2019-04-041-0/+0
| | | | | | | | | | | | | Pulls in security patches: * [Backport] Security bug 933743 * [Backport] Security bug 917608 * [Backport] Security bug 916874 * [Backport] Security bug 914511 Task-number: QTBUG-74445 Change-Id: Id1ad904857e8f8e15208ae80c8c0258e3d8f4faa Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumMichael Brüning2019-04-012-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also fixes the fact that WebEngine was passing POST data to Chromium even if the request was not a POST request. This triggered an assert in the backported code. 3aaf2ca833c [Backport] Security bug 906739 e4e10461659 [Backport] Security bug 906437 0a717e1dbe9 [Backport] Security bug 913212 c7fa9a16957 [Backport] CVE-2019-5803 ebe1e7068ca [Backport] Dependency for CVE-2019-5802 (1/5) 597dae52a3b [Backport] CVE-2019-5802 (1/5) 64d3770e5e9 [Backport] CVE-2019-5802 (2/5) a34d2fb5dd1 [Backport] CVE-2019-5802 (3/5) 62f25b2d83f [Backport] CVE-2019-5802 (4/5) a63d51633ab [Backport] Dependency for CVE-2019-5802 (5/5) c6d0023bc59 [Backport] CVE-2019-5802 (5/5) f7fcbe53871 [Backport] Security bug 905509 (1/13) 94f1317917f [Backport] Security bug 905509 (2/13) 812a9e68a2c [Backport] Security bug 905509 (3/13) 36c2c5e8b27 [Backport] Security bug 905509 (4/13) 8b01fa3780a [Backport] Security bug 905509 (5/13) 69b772f1e9a [Backport] Security bug 905509 (6/13) f2dfd87785a [Backport] Security bug 905509 (7/13) ec503eae3ed [Backport] Security bug 905509 (8/13) f5a4144a132 [Backport] Security bug 905509 (9/13) 03d8580cf59 [Backport] Security bug 905509 (10/13) 03c4a4ffb98 [Backport] Security bug 905509 (11/13) 700a4af1fb5 [Backport] Security bug 905509 (12/13) 03be3aa656a [Backport] Security bug 917707 269d53ceabd [Backport] Security bug 905509 (13/13) d720564a5ba [Backport] Security bug 938251 85136fedbde [Backport] Security Bug 929088 037efcfdba3 [Backport] Security Bug 931640 1/2 bea83ccee0f [Backport] Security Bug 931640 2/2 dd18af1614f [Backport] Security Bug 924905 e54c1076009 [Backport] Security Bug 919572 258feedf8e1 [Backport] Security Bug 919340 f4f1e852df5 [Backport] CVE-2019-5789 8566ec6cc21 FIXUP: [Backport] Security bug 905509 (3/13) 3d59c5717de FIXUP: [Backport] Security bug 906739 dd6863f4aea FIXUP: [Backport] Security bug 905509 43c92056fab FIXUP: [Backport] CVE-2019-5802 d6d21a17c5a FIXUP: [Backport] Security bug 913212 a4a129005d8 FIXUP: [Backport] Security bug 905509 38a6ae037ee FIXUP: [Backport] Security Bug 924905 d147ad350da FIXUP: [Backport] Security bug 905509 (3/13) Task-number: QTBUG-74445 Change-Id: Ic8d750bc89950c0e020eb43881dbf03328108940 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix timestamp deduplication for WindowsPeter Varga2019-03-281-2/+9
| | | | | | | | Based on https://chromium-review.googlesource.com/c/chromium/src/+/1432882 Task-number: QTBUG-74764 Change-Id: I74b4711f5146d2d2261487f13ccac702b9aa969e Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix style of media audio controlsAllan Sandfeld Jensen2019-03-261-0/+4
| | | | | | | | | The modern media controls in 69-based were not completely ready, so stay with the legacy media controls until 5.13. Fixes: QTBUG-74484 Change-Id: I06de16d8210341443a10d8c984f1978d373de0d9 Reviewed-by: Alexandru Croitor <alexandru.croitor@qt.io>
* Fix escaped characters in tooltipAllan Sandfeld Jensen2019-03-261-3/+5
| | | | | | | | | Go back to making the tooltip richtext, but set a white-space:pre to keep the tooltip mostly unwrapped. Fixes: QTBUG-74659 Change-Id: I5e30ee0098a608eda969b090355915a75f55405f Reviewed-by: Kai Koehne <kai.koehne@qt.io>
* Update ChromiumMichal Klocek2019-03-251-0/+0
| | | | | | | | | | | | | | Pulls in security patches: * [Backport] CVE-2019-5787 * [Backport] Security bug 906652 * [Backport] CVE-2019-5797 * [Backport] Dependency for CVE-2019-5797 2/2 * [Backport] Dependency for CVE-2019-5797 1/2 * [Backport] CVE-2019-5795 Change-Id: I273570d8c5d57e0ce441a6509360d862f2568bab Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Switch to setting 'official build' for non developer buildsAllan Sandfeld Jensen2019-03-234-1/+10
| | | | | | | | | | | Some things controlled by the OFFICIAL_BUILD defined are commented as unsafe to ship in production, so we need that as well. Note that GOOGLE_CHROME and OFFICIAL_BUILD are two different settings, so this just denotes the build as one shipped in production. Change-Id: I1fdcfec7f5c5142dd2bdc5f1d1f9a296a60e5708 Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Fix regression in setting background colorsAllan Sandfeld Jensen2019-03-224-0/+12
| | | | | | | | | This logic was incorrectly stripped out in adaptations for Chromium 68, but is still needed. Fixes: QTBUG-74519 Change-Id: Iefe7aba352bd43148898c1abeea34f4afe354d72 Reviewed-by: Jüri Valdmann <juri.valdmann@qt.io>
* Fix markdown rendering of titles in recipebrowserAlexandru Croitor2019-03-217-0/+7
| | | | | | | | | | | Apparently not having a newline before each recipe title, prevented the markdown JS renderer from rendering the titles properly, instead the titles wee unformatted and also displayed the = signs. Add the new lines. Change-Id: I8176e8f3029ca2e80114d6555bbb73696ba51509 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fixup focus implementationAllan Sandfeld Jensen2019-03-2110-32/+61
| | | | | | | | | Follow the other implementation and pass TakeFocus to WebContents Delegate, and hook to our UI from there. Also fixes use of Blur instead of LostFocus, which means we now render unfocused more correctly. Change-Id: I34a1882489bc68b9ff36ed5139af0ee8a3a95b79 Reviewed-by: Alexandru Croitor <alexandru.croitor@qt.io>
* Fix tabbing in recipebrowserAllan Sandfeld Jensen2019-03-212-5/+3
| | | | | | Fixes: QTBUG-55146 Change-Id: I034ebb3e65341b5424a24d5a143013d726d55e10 Reviewed-by: Alexandru Croitor <alexandru.croitor@qt.io>
* Bump versionKari Oikarinen2019-03-211-1/+1
| | | | Change-Id: I353693b039d5ce923db1d18d5da15db1ae714e71
* Do not report client redirects as link-clickedAllan Sandfeld Jensen2019-03-194-1/+19
| | | | | | | | | Fixes false navigation type on http-equiv refresh, and javascript redirects. Task-number: QTBUG-74490 Change-Id: Ie6fa5c94ae9642a7e9c689198a4977747f4101ce Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* Update ChromiumMichal Klocek2019-03-191-0/+0
| | | | | | | | | | | | | Pulls in security patches: * [Backport] CVE-2019-5794 * [Backport] CVE-2019-5793 * [Backport] CVE-2019-5792 * [Backport] CVE-2019-5791 * [Backport] CVE-2019-5790 Change-Id: I81a094398931f3c212906472005b1bb76589372f Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Merge remote-tracking branch 'origin/5.12.2' into 5.12Qt Forward Merge Bot2019-03-152-1/+2
|\ | | | | | | Change-Id: Icd8a5966a160e2466dc32a89d4ed7d904a3bcb4c
| * Update Chromiumv5.12.25.12.2Allan Sandfeld Jensen2019-03-072-1/+2
| | | | | | | | | | | | | | | | | | Pulls in latest security fix from 72 releases, one which is actively exploited. Fixes: QTBUG-74254 Change-Id: Iaef4cecb15295e45a795bc37cc1b467de5cc7bc1 Reviewed-by: Michal Klocek <michal.klocek@qt.io>
| * Fix incrementing download IDTamas Zakor2019-03-072-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adapt DownloadManagerDelegateQt::m_currentId to https://chromium-review.googlesource.com/1144311 Update Chromium: 09516a434b [Backport] Allow DownloadManagerImpl to get InProgressDownloadManager from DownloadManagerService b3edbf2a84 [Backport] Make DownloadManagerImpl to generate download IDs for in-progress DB Task-number: QTBUG-70702 Change-Id: I1224643398a2084fcd5d70d2c04b105ed69c1f3d Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 8600d3d22d86be364a4c29e559dda7990594d0c5) Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* | Fix warning: implicit conversion of NULL constant to 'const int'Kirill Burtsev2019-03-151-1/+1
| | | | | | | | | | | | Task-number: QTBUG-74311 Change-Id: If912564ecd29e4f11a613905f2b9169326207ec2 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* | Expose missing translations to lupdateFriedemann Kleint2019-03-051-0/+8
| | | | | | | | | | | | | | | | Add the source files within a "lupdate_run" scope. Task-number: QTBUG-74152 Change-Id: Idb7b5f58d6f7964b8ed67f34bd9f485bb7bba7b8 Reviewed-by: Joerg Bornemann <joerg.bornemann@qt.io>
* | Force destruction of webcontent client before profile adapterMichal Klocek2019-03-0112-19/+65
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently users might forget to delete webcontent client before profile adapter. This might be nasty if users are not aware of default profile. Instead of asserting badly in chromium, clean up and release chromium resources. This avoids the crash, but might leak memory if users never deletes page. Task-number: QTBUG-74021 Change-Id: I66f466f169d12f7ee08866d505260dca47800bb0 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* | Fix destruction of qt quick profile after WebEngineContext gets deletedMichal Klocek2019-03-011-1/+2
| | | | | | | | | | | | | | | | | | | | Issue takes place when QQmlApplicationEngine is a child of qApp. In case WebEngineContext gets destructed do not try to get default profile, which is anyway already gone. Task-number: QTBUG-74116 Change-Id: I24ea87baf677360a420d444b4c964feb722ab317 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* | Fix incrementing download IDTamas Zakor2019-02-282-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | Adapt DownloadManagerDelegateQt::m_currentId to https://chromium-review.googlesource.com/1144311 Update Chromium: 09516a434b [Backport] Allow DownloadManagerImpl to get InProgressDownloadManager from DownloadManagerService b3edbf2a84 [Backport] Make DownloadManagerImpl to generate download IDs for in-progress DB Task-number: QTBUG-70702 Change-Id: I1224643398a2084fcd5d70d2c04b105ed69c1f3d Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* | Merge "Merge remote-tracking branch 'origin/5.12.2' into 5.12" into ↵Allan Sandfeld Jensen2019-02-272-0/+73
|\ \ | | | | | | | | | refs/staging/5.12
| * \ Merge remote-tracking branch 'origin/5.12.2' into 5.12Allan Sandfeld Jensen2019-02-272-0/+73
| |\ \ | | |/ | | | | | | Change-Id: I423ab09061b0fb1963953438e6e6b09b2602254f
| | * Add changes file for Qt 5.12.2Antti Kokko2019-02-221-0/+73
| | | | | | | | | | | | | | | | | | Change-Id: I41bb4f924b9091b550354065211672e31088d1cb Reviewed-by: Kai Koehne <kai.koehne@qt.io> Reviewed-by: Leena Miettinen <riitta-leena.miettinen@qt.io>
| | * Update ChromiumAllan Sandfeld Jensen2019-02-201-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The last of the security fixes from Chrome 72 Changes: 493fab1afff5 [Backport] Fix for security issue 895970 Fixes: QTBUG-73417 Change-Id: If6a4f6f5773c99db3498e3b178cce39e36c85e79 Reviewed-by: Michael Brüning <michael.bruning@qt.io>
| | * Merge 5.12 into 5.12.2Kari Oikarinen2019-02-2013-43/+165
| | |\ | | | | | | | | | | | | Change-Id: I660e890b4630fba2c6828571cac99a529f24be50
| | * | Update ChromiumAllan Sandfeld Jensen2019-02-151-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: 61b45663dff1 [Backport] Fix for security issue 903500 a3b4be8d0247 [Backport] Fix security issue 901677 82b53e95166e [Backport] Fix security issue 895117 a26c352168ec [Backport] Fix for CVE-2019-5784 Task-number: QTBUG-73417 Change-Id: I149ae5a5cd4d83f17bd0c603dd2e3a1079c86e82 Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* | | | Doc: Fix JavaScriptDialogRequest.DialogTypeBeforeUnload enum valueLeena Miettinen2019-02-271-3/+3
|/ / / | | | | | | | | | | | | | | | Fixes: QTBUG-74070 Change-Id: Iad514671a588c0a3e0405dd0141ef54320ae8c86 Reviewed-by: Jüri Valdmann <juri.valdmann@qt.io>
* | | Quicknanobrowser: Hide status bubble properlySzabolcs David2019-02-251-5/+10
| | | | | | | | | | | | | | | | | | | | | Status bubble is always visible in the lower left corner. Change-Id: I334246d65261b8c762aafb7d276122f63fe3a8ba Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* | | Fix crash on dynamic_cast in global event filterJüri Valdmann2019-02-256-66/+175
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Installing an event filter on QApplication which uses dynamic_cast will crash the application since QtWebEngine is sending QTimerEvents to classes without RTTI information. Fix by 1. Moving the QObject part of MessagePumpForUIQt into api/ as a private class. 2. Using QTimer directly in WebEngineSettings, without subclassing. Fixes: QTBUG-73833 Change-Id: Ida73006a4fef76637c964f8f05468adcc4a190ce Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* | | Fix handling of touch icons when it is disabledPeter Varga2019-02-255-14/+94
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Store the icon type in a bitfield because the same icon URL might be used for various types on same page. This way webengine won't ignore to download a default icon what is also set as a touch icon when touch icons are disabled. Moreover, do not store the icon types from the previous page because a subsequent page might use the same icon URL but with different type. With this change the type of the cached icons are updated after each page load. Fixes: QTBUG-70081 Change-Id: I8031a740b07b0c6a8e5759a994f386b13ce87be2 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* | | Doc: Always treat \brief as full sentenceKai Koehne2019-02-2211-27/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | Make sure all \brief descriptions start with an upper-case letter and end with a . Also start descriptions of \class with the name of the class or struct. Change-Id: Ifd2656201f9c1dff092085508a5423ce516e2d3f Reviewed-by: Leena Miettinen <riitta-leena.miettinen@qt.io>
* | | Clarify documentation of QWebEnginePage::title()Jüri Valdmann2019-02-222-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Explain what happens when the HTML has no proper <title> defined and clarify the meaning of 'by default': it refers to the state before load()/setUrl()/etc. Fixes: QTBUG-71799 Change-Id: Ib2669007573b3ea53e205d9228237bae392f6f78 Reviewed-by: Michael Brüning <michael.bruning@qt.io> Reviewed-by: Leena Miettinen <riitta-leena.miettinen@qt.io>
* | | Doc: Copy minimal example code into overview pageKai Koehne2019-02-211-3/+13
| |/ |/| | | | | | | | | | | | | After change cfe53bce9, the 'minimal' example isn't that minimal anymore. Rather copy the few lines, like we already do for the widget example. Change-Id: I9dd818738edb8d229f54ff24822d4c1723376ccc Reviewed-by: Leena Miettinen <riitta-leena.miettinen@qt.io>
* | Remove download properly on profile destruction to avoid use after freeKirill Burtsev2019-02-197-25/+77
| | | | | | | | | | | | | | | | | | | | | | | | | | In the Widgets API, download items are children of the profile and are destroyed when the parent profile destroys its children. The download item's destructor can therefore not access the profile, as it would cause a heap-use-after-free crashes. On quick side turn ongoing downloads cleanup to match widgets one. Fixes: QTBUG-73839 Change-Id: Iabb379e91187e3e68ebcd4693fec35883b72b1f2 Reviewed-by: Michael Brüning <michael.bruning@qt.io> Reviewed-by: Jüri Valdmann <juri.valdmann@qt.io>
* | Set download state to finished when cancelling or destroying the download itemKirill Burtsev2019-02-194-10/+34
| | | | | | | | | | | | | | Task-number: QTBUG-73839 Change-Id: Ieebaa802bdfe0c410618e4213a9bedbbae9d0f61 Reviewed-by: Michael Brüning <michael.bruning@qt.io> Reviewed-by: Jüri Valdmann <juri.valdmann@qt.io>
* | Update public QML API test and enforce failure checkKirill Burtsev2019-02-191-6/+40
| | | | | | | | | | Change-Id: Ie6dd101b15ac5bd7b6d60b61922b5db688aff785 Reviewed-by: Jüri Valdmann <juri.valdmann@qt.io>
* | Doc: Fix type of WebEngineDownloadItem::view propertyKirill Burtsev2019-02-191-1/+3
| | | | | | | | | | | | Change-Id: I46fc228d99ad6d89d6f2a79a7f3c3352befe0a64 Reviewed-by: Leena Miettinen <riitta-leena.miettinen@qt.io> Reviewed-by: Jüri Valdmann <juri.valdmann@qt.io>
* | Fix crash in tst_Spellchecking::spellcheckJüri Valdmann2019-02-193-1/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The test tst_Spellchecking::spellcheck crashes when run with QT_LOGGING_RULES=qt.accessibility.cache.debug=true which triggers debug output from QAccessible::registerAccessibleInterface and QAccessible::deleteAccessibleInterface These functions are called during the construction/destruction of BrowserAccessibilityQt. The problem is that BrowserAccessibilityQt is not necessarily in a valid state at these times: BrowserAccessibilityQt relies on it's manager to be *fully* initialized yet BrowserAccessibilityQt may be constructed/destructed *during* the managers construction/destruction. The solution is to override QAccessibleInterface::isValid to return true only if the manager is in a valid state too. This disables the debug output and avoids the crash. Fixes: QTBUG-72878 Change-Id: Icffe4e503145133c24535fb094bbcb606568e57c Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
* | Update ChromiumAllan Sandfeld Jensen2019-02-141-0/+0
|/ | | | | | | | | | | | | | | | Changes: 5c76f0592d0e [Backport] Fix for CVE-2019-5776 8b78be4530ae [Backport] Fix for CVE-2019-5775 and CVE-2019-5777 297b64d3d7d7 [Backport] Fix for CVE-2019-5779 42b4075a690d [Backport] Fix for CVE-2019-5783 5ee5529dea3a [Backport] Fix for CVE-2019-5781 5bebe28ae4d0 [Backport] Fix for security issue 912508 48192fb6548b [Backport] Update sqlite 3709910608cd [Backport] Fix for security issue 908358 Task-number: QTBUG-73417 Change-Id: If451e38f04bc4df90230acd51192a38c184df304 Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* Update ChromiumAllan Sandfeld Jensen2019-02-121-0/+0
| | | | | | | | | | | | | | | | | Changes: 509f0033c434 [Backport] Fix for CVE-2019-5762 436537b89cc4 [Backport] Fix for CVE-2019-5763 69210928ceaa [Backport] Fix for CVE-2019-5764 c0f8161a7658 [Backport] Fix for security issue 922677 7f14eb3daf24 [Backport] Fix for security issue 899689 328129c5de09 [Backport] Fix for security issue 912520 a917b0698d8d [Backport] Fix for CVE-2019-5769 6c8f45a91435 [Backport] Fix for CVE-2019-5770 7b5e48775b3a [Backport] Fix for security issue 907047 Task-number: QTBUG-73417 Change-Id: I941f322313f42a6c92712f1d6cb7ae9a915bcf2e Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* Shutdown ProxyResolutionSerivceMichal Klocek2019-02-111-0/+3
| | | | | | | | Shut down the ProxyResolutionService before regenerating storage, it may have pending URLRequests. Change-Id: If79efc0bc942762dc48a50a12d74593ff1ee3989 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Better error reporting for QWebEngineUrlSchemeJüri Valdmann2019-02-113-6/+46
| | | | | | | | Add warnings for late registration and invalid configuration. Fixes: QTBUG-72842 Change-Id: I2c103c3b3581112cc885c3a1b4f42c011c3510ab Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Doc: Extend documentation of callbacksTamas Zakor2019-02-083-0/+29
| | | | | | | | Warn about callbacks on QWebEnginePage destruction. Task-number: QTBUG-72816 Change-Id: I8dbc297a8f364bc237b0672a63325af8da197e01 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* tst_origins: Don't create SharedWorkers from unregistered schemeJüri Valdmann2019-02-051-4/+1
| | | | | | | | | | | | | | | Triggers DCHECK in content::SharedWorkerInstance::Matches on CI. According to the DCHECK, SharedWorkers cannot be constructed from unique origins (worker and constructor page need to be same-origin and unique origins are never same-origin with anything). In release builds the construction will just fail as expected. The DCHECK is only triggered if at least one other active SharedWorker already exists in the same storage partition. The reason it only happens on CI might be that the previous renderer process is not torn down fast enough and the previous SharedWorker remains active. Change-Id: I0906e1b5c85587df67b768ef022386d599ce9541 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumAllan Sandfeld Jensen2019-02-051-0/+0
| | | | | | | | | | | | | | | | | | | Changes: fe4f93f10929 Disable unsupported JavaScript APIs in PDF extension 99bfdd214657 Fix apps_shim build file to properly flag extension related files fd293fc03974 Minor. Drop dependency for ffmpeg for test_support 50d06b752453 [Backport] Fix for CVE-2019-5754 cf5bd0c9157c [Backport] Fix for CVE-2019-5755 7a5167caf765 [Backport] Fix for CVE-2019-5782 09ae6be5bb83 [Backport] Fix for CVE-2019-5756 6605d8f7b430 [Backport] Fix for CVE-2019-5757 3b390539f429 [Backport] Fix for CVE-2019-5758 c350fc2e3258 [Backport] Fix for CVE-2019-5759 63cf07a2a77c [Backport] Fix for CVE-2019-5760 Task-number: QTBUG-73417 Change-Id: Ia72fd847c8c36959189fe9648c81a3eb6dec6a10 Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* macOS: Look for the widevine plugin in the possible new locationsAndy Shaw2019-02-041-2/+12
| | | | | Change-Id: Ibaaa64ace3bff9fe630d9448864587bac8f7b128 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Reinstate CT verification using known logsAllan Sandfeld Jensen2019-02-041-2/+11
| | | | | | | | Lost in the transition to Chromium 69 as the function we were using no longer exists. Reimplemented by how it is now done in NetworkContext. Change-Id: I05c986f2941c7d5f2b8641adc8c619ec3f75e0b1 Reviewed-by: Jüri Valdmann <juri.valdmann@qt.io>