Commit Graph

16268 Commits

Author SHA1 Message Date
Florian Bruhin
8a748741ba Fix checks for Nouveau workaround 2018-07-19 00:28:12 +02:00
cryzed
9ea6f4acf4 Follow symlinks when finding pass candidates 2018-07-18 16:18:56 +02:00
Florian Bruhin
1d9ee2c11d Recompile requirements files 2018-07-18 09:58:49 +02:00
Florian Bruhin
a72eee8e39 Enable XSS auditing by default
Qt disables this by default, but Chromium does have it enabled.

I also submitted a change to Qt to hopefully enable it by default there
starting with Qt 5.12: https://codereview.qt-project.org/#/c/198354/15

This also removes the claim of having a (big) performance impact, as Chromium's
XSS design doc says the opposite:
https://www.chromium.org/developers/design-documents/xss-auditor
2018-07-17 12:01:17 +02:00
Florian Bruhin
b8c70e5986 Rewrite type comments again 2018-07-16 22:35:40 +02:00
Florian Bruhin
03ac3b4d7d Update to pylint 2.0 2018-07-16 15:09:06 +02:00
Florian Bruhin
8e6aa9e3e1 Locally disable assignment-from-no-return for pylint 2.0 2018-07-16 14:53:30 +02:00
Florian Bruhin
2d65f25a04 Remove unnecessary object inheritance 2018-07-16 14:44:31 +02:00
Florian Bruhin
e4a772c61c Fix try-except-raise for pylint 2.0
See https://github.com/PyCQA/pylint/issues/2302
2018-07-16 14:44:07 +02:00
Florian Bruhin
e0f3285f05 Fix bad-indentation issues for pylint 2.0
See https://github.com/PyCQA/pylint/issues/2301
2018-07-16 14:41:18 +02:00
Florian Bruhin
e50b6912a7 Fix pylint 2.0 useless-return cases
See https://github.com/PyCQA/pylint/issues/2300
2018-07-16 14:33:11 +02:00
Florian Bruhin
b1d508a3af Rewrite pseudo "type:" comments for pylint 2.0
See https://github.com/PyCQA/pylint/issues/2299
2018-07-16 14:15:00 +02:00
Florian Bruhin
570fe3ed1a Update changelog 2018-07-16 08:17:24 +02:00
Florian Bruhin
9298f3d055 Refactor print handling and fix window.print
On Qt 5.7.1, window.print() caused a CommandError which wasn't handled as the
command was called from accept_navigation_request.

Instead, we now show the dialog in AbstractPrinting and use that directly.
2018-07-16 08:16:18 +02:00
Hendrik R
b1a060fb71 Process all events before issuing an alert
Fixes #2603

The call to processEvents fixes an apparent race condition with some window
managers, e.g. i3. QT seems to be thinking, that the window is not marked as
urgent and toggles it twice, so synchronizing before issuing the alert makes QT
behave correctly.

This change should not change the behaviour on other systems only correct the
fault reported in #2603.
2018-07-15 14:31:03 +02:00
Florian Bruhin
d1a25b6c3f Release v1.4.1 2018-07-11 17:17:51 +02:00
Florian Bruhin
ae0df2093b Update changelog for v1.4.1 2018-07-11 17:15:32 +02:00
Florian Bruhin
43e58ac865 CVE-2018-10895: Fix CSRF issues with qute://settings/set URL
In ffc29ee043 (part of v1.0.0), a
qute://settings/set URL was added to change settings.

Contrary to what I apparently believed at the time, it *is* possible for
websites to access `qute://*` URLs (i.e., neither QtWebKit nor QtWebEngine
prohibit such requests, other than the usual cross-origin rules).

In other words, this means a website can e.g. have an `<img>` tag which loads a
`qute://settings/set` URL, which then sets `editor.command` to a bash script.
The result of that is arbitrary code execution.

Fixes #4060
See #2332
2018-07-11 17:05:23 +02:00
Florian Bruhin
3b9b2bc30e NSIS: Add missing quote 2018-07-11 15:35:58 +02:00
Florian Bruhin
a8e96bc81d Update asciidoc path in release checklist 2018-07-11 14:13:34 +02:00
Florian Bruhin
4c2d69ccaf Update changelog 2018-07-11 14:10:38 +02:00
Florian Bruhin
0b98555987 NSIS: Uninstall old version before installing
Supersedes #4054
2018-07-11 14:09:24 +02:00
Florian Bruhin
0a882739c8 Update changelog 2018-07-10 16:08:32 +02:00
Florian Bruhin
14205ae14f Make link_pyqt work with PyQt 5.11 2018-07-10 16:07:58 +02:00
Florian Bruhin
727b418d8b Allow PyQt 5.10 to fail on Travis
See #4055
2018-07-10 16:01:25 +02:00
Florian Bruhin
b3adbec23e Revert "travis: Try to install a font for PyQt 5.10"
This reverts commit 689f87d596.
Doesn't seem to help...
2018-07-10 15:55:53 +02:00
Florian Bruhin
689f87d596 travis: Try to install a font for PyQt 5.10
For some reason, since a while this fails with a font related assertion error...
2018-07-10 15:25:13 +02:00
Florian Bruhin
048d8ef794 Go back to a release version of PyYAML
There's 3.13 now which supports Python 3.7
2018-07-10 15:22:51 +02:00
Florian Bruhin
53afa4275c Merge remote-tracking branch 'origin/pr/4051' 2018-07-10 15:21:56 +02:00
Florian Bruhin
e24c723700 Update changelog 2018-07-10 15:16:33 +02:00
Florian Bruhin
3b59c35b35 Merge remote-tracking branch 'origin/pr/4048' 2018-07-10 15:14:23 +02:00
murchik
a5c1903247 OTP for qute-pass. 2018-07-10 20:42:28 +08:00
pyup-bot
40057c26f5 Update pyyaml from 3.13b1 to 4.2b4 2018-07-09 19:25:23 +02:00
pyup-bot
94f2b6bdb8 Update tox from 3.0.0 to 3.1.1 2018-07-09 19:25:21 +02:00
pyup-bot
df3e41db9b Update vulture from 0.27 to 0.28 2018-07-09 19:25:20 +02:00
pyup-bot
d817818fb8 Update vulture from 0.27 to 0.28 2018-07-09 19:25:18 +02:00
pyup-bot
45da910d23 Update pytest from 3.6.2 to 3.6.3 2018-07-09 19:25:17 +02:00
pyup-bot
d1093d1c1d Update hypothesis from 3.65.0 to 3.66.1 2018-07-09 19:25:15 +02:00
pyup-bot
ea026b5ecb Update cheroot from 6.3.2 to 6.3.2.post0 2018-07-09 19:25:14 +02:00
pyup-bot
e102551f9f Update setuptools from 39.2.0 to 40.0.0 2018-07-09 19:25:12 +02:00
Florian Bruhin
b9e3d3cab9 Add workaround for chrome-extension:// URLs
Fixes #4049
2018-07-09 12:29:35 +02:00
Florian Bruhin
274b66ec46 Strip trailing newlines from pastebin URL 2018-07-08 22:09:56 +02:00
Florian Bruhin
ae32b79d54 Add exam comments to contributing docs 2018-07-04 15:37:50 +02:00
Florian Bruhin
e80e695a56 Add a mkvenv-pypi-old environment
Fixes #4038
See #3662
2018-07-04 14:08:04 +02:00
Florian Bruhin
0a31e19eda Handle download errors when the reply is already gone
Fixes #1270
2018-07-03 17:16:02 +02:00
Florian Bruhin
0f037fb415 Release v1.4.0 2018-07-03 15:44:44 +02:00
Florian Bruhin
85cc1e4f84 Update changelog for v1.4.0 2018-07-03 15:44:25 +02:00
Florian Bruhin
42a3622906 Ignore a new Qt 5.11 lowlevel message 2018-07-03 15:38:29 +02:00
Florian Bruhin
a0f36c5cbf Skip JS test which is too flaky 2018-07-03 14:15:08 +02:00
Florian Bruhin
dfafab4cff Update changelog 2018-07-03 13:52:50 +02:00