| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
Change-Id: I33c1af7c431055d95e0fb540246765cce684de15
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
|
|
|
|
|
| |
Change-Id: I359805d0bea84147fca6de2e2c7b17b4dcb17bc7
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
|
|
|
|
|
| |
Change-Id: Idb41daa68709c769330527a713689241ac073359
Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Load with client or server http error results in successful navigation,
which leads to 'true' loadFinished result, and subsequent chromium's error
page load and display with second set of loadStarted/loadFinished signals.
This effectively ignores QWebEngineSettings::ErrorPageEnabled. Fixing it
requires submodule change to ask embedder if error pages should also be
suppressed for http errors.
Also update chromium for required change, which pulls in the following changes:
* e71010069b4 Fix embedded builds with printing enabled
* f5a93d251cc Allow the embedder to suppress an error page for http errors
Change-Id: I731678575439a6dad90dfb89e79b0083c63b49c2
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
| |
Disable the InstallApp feature, which we have disabled as it integrates
with the payment subsystem.
Fixes: QTBUG-89740
Change-Id: I212bad785294a70812385e96d5f7e300f5806f87
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Pulls in the following changes:
* dfe93385f41 [Revert] Don't use harfbuzz-subset
* 9087c921839 Add user script data mojo interface and traits
* 25db271c9b5 Add WebEnginePageRenderFrame mojo interface
Change-Id: I3bf77b63acb3dab3113f70105d3dd304d2d34b95
Reviewed-by: Qt CI Bot <qt_ci_bot@qt-project.org>
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Since mojo interface no longer works on render view, but
on render frame rename the class to be WebEnginePageHost
and WebEnginePageRenderFrame
Keep SetBackgroundColor render message, since it is required
to things work.
Change-Id: I4d6b70dd448926f8ac2d75d2b87f3d490a4cfefb
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
| |
Change-Id: Ica6b794e16aecc60dc2c39d31750acc6b25410df
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
| |
Change-Id: If9394dbfe49adf7330558eac194a0ec643eb8ee6
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
| |
After site isolation we observe render frames and we do not need
render view observer any longer.
Remove RenderViewObserverHelper and track user script per
render frame. This approach is more intuitive since we run those scripts
on frames, subframes and not on render views, which can span over few frames.
Change-Id: Ife02d8a4dbecc884cfdc667b1a16dfbdd866367a
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
| |
Follow same naming as in UserResourceController, which also implements
RenderThreadObserver.
Change-Id: I8a8386e6fb9fcc52826da1d0eef6efa97fd475e9
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
| |
Change-Id: If9a6b2ceca41534f28ec1d87093778f16fc31ff0
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
| |
Mojo interface when running in single process was not correctly
destructed, since we used user resource controller as global static object.
Move user resource controller to content render client.
Change-Id: I219510c9bc382545174aa5aae99ac8282a2049e6
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Use mojo instead of old IPC, keep current design and use two
interfaces one global and one per frame for now, also use
in both cases associated interface with ipc channel otherwise
script can be added during the page load, which will radomly
brake tests.
This change moves UserDataScript to chromium since mojo binding
generation did not work correctly. Use StructTraits when serializing
the class.
Change-Id: I7073fb831c96849e47864382188300db3c9137d9
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
| |
Chromium uses HarfBuzz only for font subsetting since the 83-based
update and it can't be built with older HarfBuzz version than 2.4.0.
Task-number: QTBUG-88976
Change-Id: Ibcea31b487c3f8d1b3f9b8566b95ddf2a35987bb
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
| |
Change-Id: I4c4bbc75b9f6346a446f8094f669d142f76c164a
Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
|
|
|
|
|
|
|
|
|
|
|
| |
QtZlib is a semi private module, headers are installed
as Qt5Zlib, however all object are in QtCore.
Add support to compile against Qt5Zlib when doing
static build.
Task-number: QTBUG-87154
Change-Id: I74d1b217725b37781808a54902f9acbee41c50c4
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Pulls in the following changes:
* f830b86ef77 [Backport] mac: make find_sdk.py work when the sdk goes to 11
* 9236b21c883 Fix build with system ICU 68
* 138a7203f16 Fix build with msvc2019 16.8.0
* 1ca6cb93ca8 Add qt static dependencies: qtfreetype, qtharfbuzz
* 29b90d82710 Add qt static dependencies: qtlibpng
* da115b70738 Add qt static dependencies: qtlibjpeg
* bb90182aa90 Add qt static dependencies: qtzlib
Change-Id: Ib986dde7db99c7d6663d12f933ddbb4acc4e79e1
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
Reviewed-by: Qt CI Bot <qt_ci_bot@qt-project.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add qtfreetype, qthurfbuzz, qtlibpng, qtlibpng
static 3rdparty libs.
If qtbase has some 3rdaprty libs, which are also
present in chromium. This leads to duplicated symbols
and can lead to unexpected issues with application.
Currently we do only static builds for qtpdf, therefore
this changes only affects qtpdf builds.
If qtfreetype is used, hurfbuzz dependency is not used,
qtlibpng is only used when pdf compiled with xfa.
Task-number: QTBUG-87154
Change-Id: Ibba528268d9c989a2c63c1a7881ba0c95c325437
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Make the WebContentsDelegateQt::EmitLoadStarted() and the
WebContentsDelegateQt::EmitLoadFinished() independent from
the WebContentsDelegateQt::LoadProgressChanged() by removing
m_lastLoadProgress.
Adapt the WebContentsDelegateQt::LoadProgressChanged() to send
signal only if load is in progress.
Add a new test based on the bugreport.
Fix qmltests::WebEngineViewSource::test_viewSourceURL() flaky tests.
Fixes: QTBUG-65223
Fixes: QTBUG-87089
Change-Id: I90af4d2e85105dba801beb8102991eb4ef14c6a3
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This change addresses following wrong assumptions implemented earlier:
* fix assert condition for custom MotionEventQt: pointer index is only
reserved only for two distinct events POINTER_UP and POINTER_DOWN,
which represent one single non first/last pointer up and down event.
* MotionEvent API doesn't support delivering multiple touch point
changes at once, hence code should send every touch point's up/down
step by step to not confuse gesture detection classes in chromimum
(ultimately fixing arising asserts which old code was triggering before).
* MotionEvent shouldn't contain more touch points then were already
forwarded or reported released, hence every step should contain only
part of all touch points received in handleTouchEvent.
Fixes: QTBUG-86389
Change-Id: I62275dc295494f88a6e44f36fe72f5f8227e37d4
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
|
|
|
|
|
|
| |
Fixes: QTBUG-89001
Change-Id: I9f336313b075ad0cb3115975afc410beb415e4a0
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
QQuickPdfDocument passed source QUrl::path() to QPdfDocument::load.
QUrl::path() output gets "/" as prefix on Windows preventing the file
from being found so this needs to be accounted for by changing it to
QUrl::toLocalFile().
Fixes: QTBUG-88938
Change-Id: I52ed44f67c22bea31637050442487e1914011de9
Reviewed-by: Andy Shaw <andy.shaw@qt.io>
Reviewed-by: Shawn Rutledge <shawn.rutledge@qt.io>
(cherry picked from commit 5852716178972dd34df34dabc52a6616eead0aca)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
|
|
|
|
|
|
| |
Fixes: QTBUG-88861
Change-Id: I7091aca70aaf87edf0b1e67ec3fa705a59c8192c
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
|
|
|
|
|
|
|
|
|
|
| |
TouchCancel may come with empty points list, so previous one (from TouchBegin)
is used. Therefore it should be cleaned independently on leaving the scope.
Thus unify common code cleanup in the end of handleTouchEvent and ensure
TouchCancel's ids remove from mapping.
Change-Id: I1ef2baa5f920fa9096ddac2ddd5d4ac70ab6e218
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
| |
This api was made private in dev 4e400369c0 and currently has side effects,
which lead to touch malfunction and test failures.
Task-number: QTBUG-88001
Change-Id: Ie84e770a229f58704363448df116aedbc3e8eb82
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When built against a Qt version different from the module version, all
QtWebEngine libraries will be versioned with MODULE_VERSION.
QtWebEngineProcess as part of the module should be handled in the same
way.
Change-Id: I34073337e813baac46f207443bf54ca78d879ea6
Reviewed-by: Andy Shaw <andy.shaw@qt.io>
(cherry picked from commit c636e88bc49f59548e1ac3401ae547e2ae9d2570)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When on macOS, with a frameworkless build, WebEngine resources are
stored in a Resources directory named with a capital R.
This is the standard directory name for resources on macOS, however
Qt WebEngine was expecting to find resources in a directory named
`resources` (no capitalized first letter).
Task-number: QTBUG-72368
Change-Id: I2106a50a63c6d812dc6ad649645e3b6b9e0471e2
Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io>
|
|\
| |
| |
| | |
Change-Id: I516761e18c03c6cfd4d44a6ee176a2add9a5b022
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Chromium gl bindings headers get mixed with qt opengl headers.
This results in GLDEBUGPROC missing definition errors.
Fixes compilation for apalis-imx6 on zeus.
Task-number: QTBUG-88219
Change-Id: I0a18ceff3336ab457c2d9f35ef17c28c01bbe035
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Including security issue under active exploit.
Submodule src/3rdparty 55b3d183..fb6ab5e4:
> [Backport] Security bug 1137608
> [Backport] CVE-2020-16011: Heap buffer overflow in UI on Windows.
> [Backport] CVE-2020-16009: Inappropriate implementation in V8
> [Backport] CVE-2020-16008: Stack buffer overflow in WebRTC
> [Backport] CVE-2020-16005: Insufficient policy enforcement in ANGLE
> Fix assert when running tests build with -no-webengine-webrtc
Change-Id: Ic9ee45fbd78c999881454e5e0e3091489f637aae
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Desktop audio capture requires loopback device. If creation of the
loopback device fails, it aborts the screen capture too.
Chromium does not support audio loopback on Linux and macOS:
https://crbug.com/223639
This is still the case in Chrome 88.
The fix is based on: https://codereview.chromium.org/24153018
Change-Id: Ifb13bce3b79193203c0bf52e1f2a1b3936e017c7
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Pulls in the changes:
2cad1d38b57 [Backport] CVE-2020-6540: Heap buffer overflow in Skia
e1f5ffc2a12 [Backport] CVE-2020-6569: Integer overflow in WebUSB
75b417b86b4 [Backport] CVE-2020-6570: Side-channel information leakage in WebRTC
0785cd83782 [Backport] CVE-2020-6573: Use after free in video
3ddb1e9639a [Backport] CVE-2020-6575: Race in Mojo
e967bb155a0 [Backport] CVE-2020-6576: Use after free in offscreen canvas
40cebfb3051 [Backport] CVE-2020-15959: Insufficient policy enforcement in networking
405e7526583 [Backport] CVE-2020-15965: Out of bounds write in V8
295feb590b1 [Backport] CVE-2020-15963 and CVE-2020-15966
43812fd40d4 [Backport] CVE-2020-15961: Insufficient policy enforcement in extensions
08a25bf9dd2 Only upgrade to WebSocket when WebSocket was requested
2f75c909270 [Backport] CVE-2020-15962: Insufficient policy enforcement in serial
06afd03d826 [Backport] CVE-2020-15960: Out of bounds read in storage
9e5518f06ad [Backport] Security bug 1111149
b627f77e859 [Backport] CVE-2020-15964: Insufficient data validation in media
bc35c7711ad Fix assert when checking if RendererAppContainer feature is enabled
06b27f95d60 [Backport] CVE-2020-6571: Incorrect security UI in Omnibox
8227b9613d1 CVE-2020-15999: Heap buffer overflow in freetype
cc1e87a0d71 [Backport] CVE-2020-15978 Insufficient data validation in navigation
308da5d58b4 [Backport] CVE-2020-15969: Use after free in WebRTC.
9f5fde5b649 [Backport] CVE-2020-15968: Use after free in Blink
97b92535b31 [Backport] CVE-2020-15972: Use after free in audio.
873abc1112c [Backport] CVE-2020-15979: Inappropriate implementation in V8.
c0343ceec47 [Backport] CVE-2020-15976: Use after free in WebXR
e874d48f9e6 [Backport] CVE-2020-15992 Insufficient policy enforcement in networking
956ce06c56c [Backport] CVE-2020-15974: Integer overflow in Blink
4662223422d [Backport] Security bug 1125199
74e26aab318 [Backport] Security bug 1107824
33e9e655166 [Backport] CVE-2020-15977: Insufficient data validation in dialogs.
f6db4999b0e [Backport] CVE-2020—15973: Insufficient policy enforcement in extensions (1/2)
466da17a0cd [Backport] CVE-2020—15973: Insufficient policy enforcement in extensions (2/2)
027c3d7bae7 [Backport] CVE-2020-15989: Uninitialized Use in PDFium
14e9b6f6d3a [Backport] CVE-2020-16003: Use after free in printing
8527c994fe3 [Backport] CVE-2020-16002: Use after free in PDFium
4f461642a79 [Backport] CVE-2020-16001: Use after free in media.
99877493b32 Fixup: [Backport] CVE-2020-16001: Use after free in media
489d6e637e5 [Backport] CVE-2020-15987: Use after free in WebRTC (1/2)
6ef8f4ed829 [Backport] CVE-2020-15987: Use after free in WebRTC (2/2)
9d173d02d5e [Backport] Security bug 1106091
327474aed0e [Backport] CVE-2020-6557: Inappropriate implementation in networking
55b3d183921 [Backport] CVE-2020-15985: Inappropriate implementation in Blink.
Task-number: QTBUG-87967
Change-Id: Ibca52ab97ac407679e4bac5c6b7dc2285f8bcd37
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
QTouchEvent may contain touch point release and press simultaneously
in this particular order. Hence if mapping for released point is deleted
before id is chosen for pressed one, output transformed list may contain
points with same ids. Since new touch points delivered before released
one, this will lead to assert in chromium about duplicate ids.
Change-Id: I209d7d8c752c7bd74d2580ef65478c92e54cb099
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Screen enumeration has been implemented in webrtc for X11:
https://webrtc-review.googlesource.com/c/src/+/169200
It is available for webengine since the Chromium 83 update. Since then,
the screen sharing is broken on X11 because the screen ID is not 0
anymore.
Change-Id: I8e513aa446484fde869e2317afa28ecb6d5ebac0
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Ignore url loading if the request is not from a data
url and the Q(Quick)WebEngineNewViewRequest.openIn() is not
called on newViewRequested().
Set the missing Q(Quick)WebEngineNewViewRequest::requestedUrl
property.
Fixes: QTBUG-87378
Change-Id: Idddc9cf075db68dcf5825b3e746d16419d02cfa0
Reviewed-by: Tamas Zakor <ztamas@inf.u-szeged.hu>
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
resources"
This reverts commit ed8fe2b34712e70becaae29520afdc8e56addf35.
Reason for revert: Change in 5.15.2 is already done in e33a7a7592ed8517ec83543d822178871f25b0c5
Change-Id: I3d866f6fafbe22ebf9552497d19ebd5fd17e1bf0
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
In 5.12.x build the .exe version resources are still present. The
version meta data is important for MSI based installers. Without this
information an uprade for a Qt 5.12 based application to 5.15 will
most likely fail.
Also the version information contains copyright information of the Qt
Company.
[ChangeLog][QtWebEngineProcess] Fix missing version resources in QtWebEngineProcess.exe.
Fixes: QTBUG-88110
Change-Id: I965da2db78dbf74ff93e1975c0622edc7c404bc2
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
| |
Uses percentage encoded utf8.
Task-number: QTBUG-85363
Change-Id: Idabe6ff9a66897792732b9ebb648f54a84e86bb8
Reviewed-by: Jüri Valdmann <juri.valdmann@qt.io>
|
|
|
|
|
|
|
|
|
| |
Add error message when trying to launch QtWebEngineProcess
from network share if sandbox is enabled.
Task-number: QTBUG-84632
Change-Id: Ia7d5df38accf60eafe8fb4d43dab3db4d2d51287
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
| |
Do not look up fallback values before they are needed.
Change-Id: I8bb21e261e8d218c658ac2a08e3cdc30b2cea47d
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
|
|
|
|
|
|
|
| |
Task-number: QTBUG-87129
Change-Id: Id98aa1e8c839c06022fbc633c0b64c7681205349
Reviewed-by: Florian Bruhin <qt-project.org@the-compiler.org>
Reviewed-by: Jüri Valdmann <juri.valdmann@qt.io>
|
|
|
|
|
|
|
|
| |
Fix typo which surprisingly gives no errors with archiver,
however generated archives are bogus (at lest with lld)
Change-Id: Iea1e22c66eb99a720b398c5903b56938b309905f
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
| |
If the PDF is not loaded before it jumps to the image then it fails
to jump to the specified page and ends up showing the first one.
Change-Id: I6061431e1fd9b743afaca3df0aec03dc6a1144bf
Reviewed-by: Shawn Rutledge <shawn.rutledge@qt.io>
(cherry picked from commit e2e249b8bb399ef7bcf6fe3be0b4f2fc9fa18182)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
|
|
|
|
|
|
|
|
|
| |
Chromium will recreate the original mapping based on the native keycode,
breaking any remapping.
Fixes: QTBUG-86672
Change-Id: I4b7e6f7434049cdf7250bee1ef759a9df4d4987c
Reviewed-by: Jüri Valdmann <juri.valdmann@qt.io>
|
|
|
|
|
|
|
|
| |
The QIcon::pixmap function does internal scaling messing up our
intermediate structures.
Change-Id: I727efd58a4cc948fa3e4b23539d97e8ca755d060
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Pulls in the following changes:
8776c7b2c15 [Backport] Security bug 1052492
22d88d240bc [Backport] CVE-2020-6533: Type Confusion in V8.
3c832d33641 [Backport] CVE-2020-6532: Use after free in SCTP
388b838dbb3 [Backport] CVE-2020-6541: Use after free in WebUSB
27fa668c5ee [Backport] Security bug 1102408
d3a76ebde8e [Backport] CVE-2020-6542: Use after free in ANGLE
4694a85f33e [Backport] CVE-2020-6543: Use after free in task scheduling
583f976f9a7 [Backport] CVE-2020-6544: Use after free in media
fa97385b501 [Backport] CVE-2020-6548: Heap buffer overflow in Skia
32655453cd7 [Backport] CVE-2020-6549: Use after free in media
ddcf711e69e [Backport] CVE-2020-6550: Use after free in IndexedDB
6a0f49a17b0 [Backport] CVE-2020-6551: Use after free in WebXR
b385b7bbbe4 [Backport] CVE-2020-6545: Use after free in audio
fe23e656183 [Backport] CVE-2020-6559: Use after free in presentation API
4466538c610 [Backport] Security issue 1102137
c3d07802d40 [Backport] Security issue 1108639
b1c7638148b [Backport] Security issue 1098860
011af517d81 [Backport] CVE-2020-6555: Out of bounds read in WebGL
273005ea959 [Backport] Security bugs 1087629 and 1029569
bdb438eff33 [Backport] Dependency for CVE-2020-6561 (1/2)
c223f423808 [Backport] Dependency for CVE-2020-6561 (2/2)
607bff335b1 [Backport] CVE-2020-6561: Inappropriate implementation in Content Security Policy
ed4b6792e13 [Backport] CVE-2020-6562: Insufficient policy enforcement in Blink
c5637fa9071 [Revert] [build] Remove jumbo build configs
Task-number: QTBUG-86342
Change-Id: I7ad617e1c617ef405a608e05cdafbfae5ad412fa
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Amends commit 99a668c324. Task 'swapBuffersOnVizThread' is supposed to
be scheduled only when m_middleBuffer is ready after swap on gpu thread.
Checking for m_taskRunner is not enough to verify this. Call to
updatePaintNode may come from SG backend on expose event, thus breaking
expected sequence of buffers swaps.
Task-number: QTBUG-85817
Fixes: QTBUG-86599
Change-Id: Ia97a7a24b5672a2979b514d3cb4879e7630941eb
Reviewed-by: Jüri Valdmann <juri.valdmann@qt.io>
|
|
|
|
|
|
|
|
| |
Add the missing implementation of
ContentRendererClient::IsOriginIsolatedPepperPlugin().
Change-Id: Ic4157da6b373450e620ff46faedad213a69adfec
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
|
|
|
|
|
|
| |
Change-Id: I81111633fb0050f75e49c8bee0354436ecec533a
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit 17cab42bf68ee70f641718a144f864eb04042aa4)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
|