| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
Pick-to: 6.10
Change-Id: I93acb15935ac43baf72006e2e563c5485f7e173d
Reviewed-by: Fabian Kosmale <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Previously, permisions were associated with the originating WebContents,
as the PermissionManager API uses those in its function calls. This is
insufficient, however, as it results in iframes not receiving the
correct permissions (because they were instead granted to the root
frame instead.
This change modifies the internals of PermissionManagerQt to use
GlobalRenderFrameHostTokens, and modifies relevant functions
across the codebase to pass those around instead of WebContents.
Media and mouse lock permissions now also query the permission manager
before issuing a request, which avoids some cases of the same request
being sent multiple times in a row.
As a side effect, the behavior of non-persistent permissions
(as well as the behavior of ALL permissions when running in
AskEveryTime mode) is standardized so that a permission is remembered
as long as the associated frame is alive.
Fixes: QTBUG-134637
Fixes: QTBUG-135787
Pick-to: 6.10 6.9
Change-Id: I650e3328ef3830d06206acafc3305566d3a10d86
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty b5f55adaf..e94c0f365
> [Backport] CVE-2025-8582: Insufficient validation of untrusted input in DOM
> Do not use AVX intrinsics in non-AVX mode
> Fix nullptr access in D3DImageBackingFactory when using Dawn
> [fixup][msvc] Rewrite directives from function-like macro parameters
> Disable DCHECK in audio_input_device.cc
> [fixup] [Backport] CVE-2025-8576: Use after free in Extensions
> [fixup] Fix Chrome resources and WebUI we need
> [Backport] Security bug 421544815
> [Backport] CVE-2025-8580: Inappropriate implementation in Filesystems
> [Backport] CVE-2025-8578: Use after free in Cast
> [Backport] CVE-2025-8576: Use after free in Extensions
> Avoid crashing on authentication with use_bluez=false
> Avoid crash or UB on access of data being destroyed
> [fixup][extensions] Adapt Extensions for WebEngine
> [extensions] Adapt Extensions for WebEngine
Task-number: QTBUG-138965
Pick-to: 6.10
Change-Id: I22f27ae8681075f325f289f80b0e657408ee96d2
Reviewed-by: Michal Klocek <[email protected]>
|
|
|
|
|
|
|
|
| |
From API review.
Pick-to: 6.10
Change-Id: Ibcdf7780d1c03f601a703b35118d0b439e4df62c
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
| |
Pick-to: 6.10 6.9 6.8
Change-Id: Ia7e65f9050a1e57a3a2c7da69088e68fc7874ef1
Reviewed-by: Ulf Hermann <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty 40948d169..b5f55adaf
> [Backport] Security bug 431828026
> [Backport] CVE-2025-8292: Use after free in Media Stream
> [Backport] Security bug 432661300
> [Backport] Security bug 431668129
> [Backport] Security bug 428177287
> [Backport] CVE-2025-8010: Type Confusion in V8
> [Backport] Security bug 428754691
> [Backport] CVE-2025-7657: Use after free in WebRTC
> [Backport] CVE-2025-7656: Integer overflow in V8
> [Backport] Security bug 424905890
> [Backport] Security bug 427316421
> [fixup] Fix QtWebEngine build on Windows
> [fixup] Fix QtWebEngine build on Windows
> [fixup] Fix QtWebEngine build on all platforms
> [fixup] [Backport] CVE-2025-4052: Inappropriate implementation in DevTools
> [Backport] CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU (2/2)
> [Backport] CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU (1/2)
> [fixup] [Backport] [Backport] Security bugs 398049412 and 403696324 (3/3)
> [fixup] [Backport] [Backport] Security bugs 398049412 and 403696324 (2/3)
> [fixup] [Backport] Security bug 420885124
> [fixup] [Backport] [Backport] Security bugs 398049412 and 403696324 (1/3)
> [fixup] [Backport] Security bug 391114794
> [Backport] CVE-2025-6554: Type Confusion in V8
> [Backport] Security bug 421629753
> [Backport] CVE-2025-6556: Insufficient policy enforcement in Loader
> [Backport] CVE-2025-6557: Insufficient data validation in DevTools
> [Backport] Security bug 420885124
> [Backport] Security bug 412149700
> [Backport] Security bug 412400167
> [Backport] Security bug 415397143
> [Backport] CVE-2019-16707 / Security bug 408928790
> [Backport] CVE-2024-50602 / Security bug 408294914
> [Backport] CVE-2025-5283: Use after free in libvpx
> [Backport] CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
> [Backport] CVE-2025-5064: Inappropriate implementation in Background Fetch
> [Backport] CVE-2025-5281: Inappropriate implementation in BFCache
> [Backport] CVE-2025-5280: Out of bounds write in V8
> [Backport] CVE-2025-5063: Use after free in Compositing
> [Backport] Fixup for bugs 414858409 and 413080347
> [Backport] Security bug 413080347
> [Backport] Security bug 414858409 (2/2)
> [Backport] Security bug 414858409 (1/2)
> [Backport] CVE-2025-4609: Incorrect handle provided in unspecified circumstances in Mojo
> [Backport] CVE-2025-4664: Insufficient policy enforcement in Loader
> [Backport] CVE-2025-3277
> [Backport] Security bugs 398049412 and 403696324
> [Backport] Security bug 403364367
> [Backport] CVE-2025-4052: Inappropriate implementation in DevTools
> [Backport] CVE-2025-4051: Insufficient data validation in DevTools
> [Backport] CVE-2025-4096: Heap buffer overflow in HTML
> [Backport] Security bug 416535738
> [Backport] CVE-2025-6192: Use after free in Profiler
> [Backport] CVE-2025-6191: Integer overflow in V8
> [Backport] Security bug 409243443
> [Backport] Security bug 407368915
> [Backport] CVE-2025-3071: Inappropriate implementation in Navigations
> [Backport] Security bug 391114794
> [Backport] CVE-2025-3069: Inappropriate implementation in Extensions
> [Backport] Security bug 396460489 (2/2)
> [Backport] Security bug 396460489 (1/2)
> [Backport] Security bug 397187119
> [Backport] Security bug 399002829
> [fixup][rust] Build without rust crash support
> [fixup] Fix QtWebEngine build on Windows
> [fixup][extensions] Adapt Extensions for WebEngine
> [extensions] Adapt Extensions for WebEngine
Pick-to: 6.10
Change-Id: I7ea749a0807540dec2519a6dcb16559392182781
Reviewed-by: Michael Brüning <[email protected]>
|
|
|
|
|
|
|
|
| |
QUIP: 23
Task-number: QTBUG-138725
Pick-to: 6.10 6.9 6.8
Change-Id: Ic774a8415afdc198aab88f19e7f6b860ec766728
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
| |
QUIP: 23
Task-number: QTBUG-138725
Pick-to: 6.10 6.9 6.8
Change-Id: I53074540f4340b1e8b20de5fa3c90f75db45547b
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
| |
QUIP: 23
Task-number: QTBUG-138725
Pick-to: 6.10 6.9 6.8
Change-Id: I2cebf8b03edc00bc6fb1e7c034311cb9fe763139
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
| |
use_qt called use_qt5 now, and libevent no longer appear used
Change-Id: Ia50100c9c0ad43218ee8daff25b43dd036f41001
Pick-to: 6.10
Reviewed-by: Peter Varga <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
| |
The type already had registration macros but because the header was
added to a non-QML module these didn't come into effect.
Add a foreign type to register it properly.
Task-number: QTBUG-138589
Pick-to: 6.10 6.9
Change-Id: I5a960cf77b71ff4f2b7ddc03b1583029b86d84bc
Reviewed-by: Ulf Hermann <[email protected]>
|
|
|
|
|
|
|
| |
Task-number: QTBUG-138589
Pick-to: 6.10
Change-Id: If8eb6447c3380efa03258f478da68feddccd1988
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138720
Pick-to: 6.10 6.9 6.8
Change-Id: I9c064bef911e36c12553fc6cebb7408fb02bcc0b
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
| |
This new policy prevents session cookies from being saved to disk even
for crash recovery purposes. Persistent cookies are still stored.
As a drive-by add a missing data row in a QWebEngineProfileBuilder test
Task-number: QTBUG-135799
Change-Id: I55364aa96c07ce83d3f30d812450421354310d72
Reviewed-by: Michal Klocek <[email protected]>
|
|
|
|
|
|
|
|
|
| |
Remove suggestion to use the "Enable high DPI" flag, this hasn't
been needed since Qt 6.0
Pick-to: 6.9 6.10
Change-Id: I663d00b6192d561c88da9f6ea28bb9c232c89c9d
Reviewed-by: Michal Klocek <[email protected]>
|
|
|
|
|
|
|
| |
Pick-to: 6.8 6.9 6.10
Fixes: QTBUG-138641
Change-Id: I97ee0964ea09080917f79f40adead61dd086442a
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138714
Pick-to: 6.10 6.9 6.8
Change-Id: I330d87a2441a9256965892b0078a9d6d23f9f60c
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
|
| |
Adds feature to use system openh264 if compiled
with proprietary codecs.
Pick-to: 6.10
Change-Id: I65d10b8b259e5c1b5a86d0faeb0903b86144dc5b
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
| |
Everything we need have long been available through public API.
Pick-to: 6.10 6.9 6.8
Change-Id: Ifc3925971e8b81852ad42d5dd535ffa9eec1b37b
Reviewed-by: Michal Klocek <[email protected]>
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138723
Pick-to: 6.10 6.9 6.8
Change-Id: Iac39c4d70e3887e910fe32f70e42d914a854e62d
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
|
|
| |
Amends
2ed5f9632 Create EGLImage with eglCreateDRMImageMESA() for exporting dma_buf
Pick-to: 6.10 6.9
Task-number: QTBUG-136257
Change-Id: Ice4f4d58edaa7de6a55b2a621e930393803eb869
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
| |
QUIP: 23
Task-number: QTBUG-138724
Pick-to: 6.10 6.9 6.8
Change-Id: Id8b7ed78da12ea9c664d1f41e6181135ddfb394d
Reviewed-by: Michael Brüning <[email protected]>
|
|
|
|
|
|
|
|
| |
QUIP: 23
Task-number: QTBUG-138724
Pick-to: 6.10 6.9 6.8
Change-Id: I91a17b1e3fc3c2ca715c41e369d59e48b057832f
Reviewed-by: Michael Brüning <[email protected]>
|
|
|
|
|
|
|
|
| |
QUIP: 23
Task-number: QTBUG-138724
Pick-to: 6.10 6.9 6.8
Change-Id: Icc5c4b8811de48e183975ec79f357cf9b993df45
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138721
Pick-to: 6.10 6.9 6.8
Change-Id: Iab82da7e03551a5d76a08144c3f81c1485d85525
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138722
Pick-to: 6.10 6.9 6.8
Change-Id: I43973237573db286df2601c7b29928bcd7fc53e2
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
| |
Change-Id: I10e699fcf3ed60952e86faf7f10297fea3a16d35
Reviewed-by: Michael Brüning <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
By default, Qt's accessibility code will provide an object's
full accessible hierarchy inside the Identifier string that's
passed to a screen reader or automation software. This may
be undesirable for users who use WebEngine for automated
testing.
This change adds a new QWebEngineSetting that disables this
behavior, and instead makes sure that the HTML 'id'
attribute is passed cleanly to accessibility software.
When there is no 'id' attribute, the default Qt behavior
still applies, and the Identifier string is still the
full object hierarchy.
Fixes: QTBUG-134762
Change-Id: Ica0b626c05b5cdca0bad83280ba15183ff9480f6
Reviewed-by: Michael Brüning <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Our loading ui delegates implementation dates back to
Qt5 where we supported qquickcontrols1 with qquickcontrols2
overrides. Also it provided an unofficial way to customize
the ui delegates by providing own qml files as
we createed qml compnonents by loading qml files.
This works fine if you have deployed ui delegates qml files
on target systems. However, qt-cmake deployment scripts do
not handle qml file deploment instead qml plugins are used.
Therefore, drop the qml file based delegate creation and simply
let the qml enigne load the module and create the component.
Note we have now the proper delgates ui/request api to provide way
to customize delegates, however provide still way of overriding
delegates with own delegates module by setting environment variable
QTWEBENGINE_UI_DELEGATE_MODULE. This varaible can contain the list
of modules spearted by semicollon.
Task-number: QTBUG-111907
Pick-to: 6.10
Change-Id: Ie79f863e75ea69f6a0e600c627ab111224b5e79c
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
| |
This function is used to detach signal emissions from the main thread,
but there are cases when the API object (view, profile, etc.) is
destroyed while we are still waiting for incoming signals. We can avoid
some crashes by not trying to execute these codes if this case happened.
Pick-to: 6.10
Change-Id: Ic5e6b46c7d40bfc9a816055ca335fc6806a045a3
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
| |
It is needed for webrtcLoggingPrivate.startEventLogging
extension api.
Fixes FATAL:extension_function.cc(416)] Check failed: did_respond() webrtcLoggingPrivate.startEventLogging
crash on google meet.
Pick-to: 6.10
Change-Id: I6bdba290944b1cb1dcb1d3345e02abf90e204774
Reviewed-by: Szabolcs David <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
HTMLPermissionElement was introduced in the 126 update.
It comes with a set of new localized strings which are
generated at build time.
Add the missing pak file to webengine.
Fixes FATAL:resource_bundle.cc(1210)] Check failed: !data->empty()
crash on google meet when trying to allow mic access in a video call.
Pick-to: 6.10
Change-Id: Id3f7c27b145e63656d79df6004a48b2ed63a7e13
Reviewed-by: Szabolcs David <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Set EGL_PLATFORM=wayland to force ANGLE to obtain EGL display connection
for wayland platform. Otherwise, the display connection for
EGL_DEFAULT_DISPLAY may belong to a platform which Nvidia's EGL driver
doesn't support. In case of unsupported platform, EGL may fallback to
Mesa software renderer (LLVMPipe) disabling hardware acceleration in
Chromium.
Pick-to: 6.10
Fixes: QTBUG-138425
Change-Id: I14250fd21e2215652d4533ca19784e2ac29cb5bb
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
| |
API review
Pick-to: 6.10
Change-Id: I31de5672d1cf50a6b533e2a9c44b1c7af8e71056
Reviewed-by: Marc Mutz <[email protected]>
|
|
|
|
|
|
|
|
| |
Found in API-review.
Pick-to: 6.10
Change-Id: Iac02f5a840a0a76c7fdb084f0c4d11e1f7d789d9
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
|
|
| |
Update tests accordingly.
Found in API-review.
Pick-to: 6.10
Change-Id: Ife361cf95db6953413fe34392caf6fce3296c42a
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
| |
Rename installDirectory() to be consistent with QWebEngineProfile.
Update tests accordingly.
Found in API-review.
Pick-to: 6.10
Change-Id: I8e9c9760950c0bf65a75292a22a1abc1f7deba91
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Make the move ctor inline
* Do not export the inlined move ctor based on:
46d1e664f2d100355dfcf2438d775189c4d8c0f7
Found in API-review.
Pick-to: 6.10
Change-Id: Ibb31c5b86886a2e29a1a2fb25eeafc433e7bc699
Reviewed-by: Marc Mutz <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix build race condition, as file sandbox_win.cpp includes global header, make sure headers are in sync before trying to build static sandbox lib.
Build log error on bug report.
This amends e372bb3dad121465d61cc15de18c06c85f938072.
Fixes: QTBUG-138159
Pick-to: 6.10 6.9 6.8
Change-Id: Iab5be9082a31b56aece926a0267e0a7378635996
Reviewed-by: Alexey Edelev <[email protected]>
|
|
|
|
|
|
|
| |
Pick-to: 6.10
Task-number: QTBUG-137478
Change-Id: I9c419f6e1349aef34237da0cf85cbd4a1968fbc2
Reviewed-by: Marc Mutz <[email protected]>
|
|
|
|
|
|
|
|
|
| |
Not allowed any more. API review
Pick-to: 6.10
Task-number: QTBUG-137478
Change-Id: I4559e3d00af0be46ec90bdcfff81a7b39d984bb8
Reviewed-by: Fabian Kosmale <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Forward 'WillDestroyServiceWorkerContextOnWorkerThread' event
to the browser which will release the browser side resources
of the service worker.
Fixes "FATAL:api_event_handler.cc(44)] Check failed: emitters.empty().
|emitters| should have been cleared by InvalidateContext()"
Amends 9d9780d444e8e7b1a2e066ae4b872a77d35f87bf
Task-number: QTBUG-61676
Pick-to: 6.10
Change-Id: Ic7d127e979036873646324d17d351bfc30f78950
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
| |
Pick-to: 6.10
Change-Id: Id61d284ded8a47d825ba57c3311fe9de1ac825eb
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The documentation previously suggested using qmake to build Qt
WebEngine, which is outdated for Qt 6. The recommended approach is to
use qt-configure-module followed by standard CMake build and install
steps.
Pick-to: 6.10 6.9
Fixes: QTBUG-138009
Change-Id: I7591e677ec1172640dfb11116dc9dc9673e451a3
Reviewed-by: Axel Spoerl <[email protected]>
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
| |
Pick-to: 6.10
Change-Id: I9615f0a095843fdf295e454a93476cf349f7fc76
Reviewed-by: Michal Klocek <[email protected]>
|
|
|
|
|
|
| |
Pick-to: 6.10
Change-Id: Id2d09604201b2c007c76328f92bb4e0c0d802cae
Reviewed-by: Michal Klocek <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Added a clarification to qtwebengine-platform-notes.qdoc.in
stating that Qt WebEngine requires a C++20-compatible
compiler due to its Chromium dependency.
Pick-to: 6.10 6.9
Fixes: QTBUG-136231
Change-Id: If4557dbf1c6e18eae1f070a3089fc4d6d4ccd450
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
Reviewed-by: Leena Miettinen <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
In case delegate for touch handle can not be loaded
bail out and simply return nullptr as TouchHandleDrawableQt
works fine without delegate (guards against nullptr).
Note all other dialog already bailout in case default delegate
can not be loaded.
Tested on bookworm with 6.8.3
Fixes: QTBUG-111907
Pick-to: 6.10 6.9 6.8
Change-Id: Ib509b63010888fa718f23148c06d973382cad428
Reviewed-by: Michael Brüning <[email protected]>
|
|
|
|
|
|
|
|
| |
Amends 18210c251 Make possible to use system EGL instead of ANGLE on Linux
Pick-to: 6.10
Change-Id: I67e83f46072d5984ceb140ac4d9cf786b057ee20
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
|
|
|
|
|
|
|
|
|
|
| |
Neither QtWebEngine nor QtPDF can currently be compiled with MinGW.
Fixes: QTBUG-135100
Pick-to: 6.10 6.9 6.8
Change-Id: I93d5bcdd80d91cf0c2ef5e9e334d9f6be439ea83
Reviewed-by: Moss Heim <[email protected]>
Reviewed-by: Shawn Rutledge <[email protected]>
|