core libs
* Small performance improvements.
* Reworked KCmdLineArgs::makeURL to make "kpdf a:b" work when a:b is an
existing file in the current directory.
* Be more robust against addressbar spoofing.
* A hostname may resolve to multiple addresses. When connection to one
timeouts, we should not immediately give up. Instead, we try the other
addresses.
http ioslave
* Fix crash on broken servers.
* Fix Connection failed Url Frame Redirection.
* Fix session cookies not always accepted.
* Fix persistent cookies are treated like session cookies.
* Fix a cross-site cookie injection vulnerability.
* Fix for correctly propagating HTTP response headers > 8K.
* Fix http responses containing just a header cause Konqueror to wait
indefinitely for a response.
* Fix problem with cookies in konqueror when server specified as IP adress.
* Fix per-site cookie policy does not apply to cookies set for subdomains.
KHTML
* Fix handling of font-variant:inherit.
* Fix GMail/Firefox yet again.
* Fix confused cursor shapes if mail and new-window links appear on the
same page.
* Fix cannot type text into boxes on riteaid.com.
* Optimize descendant selector matching.
* Fix invalid placing of image.
* Default to "UTF-8" per section 2 of the draft W3C "The XMLHttpRequest
Object" specification.
kjs
* Do not convert accented latin1 characters into undrawable char in
websites using advanced JavaScript.
that are based on embedding white spaces in the url. In addition
the address bar could be tricked to show an URL which it is
intending to visit for a short amount of time instead of the
current URL.
http://www.kde.org/info/security/advisory-20070816-1.txt
Bump PKGREVISION for kdelibs3 and kdebase3
KHTML
* Implement heuristic cyr encoding detection.
* Implement support for textContent().
* Indicate near mouse pointer if a link wants to open a new browser window.
* Harmonize document.href and .pathname of about:blank windows with other
browsers.
* Fix jumping to the top right before loading a new page.
* Make frame name lookup locale-independant.
* Make valueOf() and toString() accessible across sites.
* Make setValue() work on radio button and checkboxes.
* overrideMimeType() implementation.
* Fix various crashes and bugs.
KJS
* Support named function expressions.
* Support for localeCompare() function.
* Caller property implementation.
* Improvements:
* Unreserve class keyword as it's often used as an identifier by JS
programmers.
* Disable UTF-8 validation in libPCRE, since it's incredibly slow.
* Support unicode escape sequences in identifier names.
* Parse null characters.
* toExponential() fix for negative numbers.
* Fixed off-by-one digit error in toFixed().
Kate
* Update cmake highlighter.
* Fix bug in search and replace, placeholder did not work correctly.
* Make cursor in inactive views behave correctly.
* Update selection after paste.
* Multiple views are usable again.
Kimgio
* Fix buffer overflow during writing xview files.
KHTML
* Treat specific attribute values case-insensitively during style matching.
With these changes, KHTML becomes the first rendering engine to thoroughly
pass the 578 tests of the excellent Automated CSS3 Selectors Testsuite
(http://www.css3.info/selectors-test).
* Implement CSS3 extension text-overflow: ellipsis.
* Implement overflow-x/y as many websites use it now.
* Fix overflow sometimes not painted/repainted.
* Fix incorrect margin for some tables.
* Fix crashes on some AJAX pages.
* Fix background no-repeat image wrapping.
* Fix instanceof ecma operator not working on DOM objects.
* Fix some pages appearing empty or missing content.
* Fix table caption rendering on some pages.
* Make innerText much faster fixing freezes on some web pages.
* Fix crash on javascript manipulated tables.
* Fix all links gettinh underlined while hovering over just one link on
some malformed web pages.
* Let floats overflow the left border when they should.
* Fix cursor in input field not disappearing when setting focus to another
input field.
* Prevent crash-inducing recursion of detach due to blur events happening
when widgets with focus get destroyed.
* Fix border collapse not working in tables.
* Fix ∉ displayed as ¬in;.
* Make max-height and max-width: none work correctly.
* Fix memory leak when using deleteRule.
* Fix crash when resolving a stylesheet imported from external one.
* Fix an infinite relayout on msdn.
* Fix computed line-height beign incorrect.
* Fix crash race on various sites with popup ads.
* Reset hover text when mouse leaves khtml view.
* Whenever the content changes, recheck if the mouse cursor shall show
some other shape to correctly match it to the content below it.
* Immediately redraw visited links with the respective color when the
page got loaded and inserted into the history.
* Fix tables sometimes intruding floats on dynamic restyle.
* Fix conflicting priorities in font shorthand parsing leading to wrong
line-height computation.
* Do not crash when finding backwards.
* Fix infinite recursion happening when changing style from
overflow:scroll to auto.
* Fix initial size of input type=FILE form control.
* Make vertical-align text-top/bottom CSS 2.1 compliant.
* Fix ecma alert() dialog formatting it's output as a single huge line
without line breaks.
Kate
* Add actionscript highlighting.
* Add some pseudo-elements that khtml supports, but FireFox doesn't.
* Fix wrong indentation at top of source file in cstyle indenter.
* Fix memory leaks and accessing uninitialized variable.
* Fix endless loop in cstyle indenter.
* Fix crash using comment commands.
* Java Highlighting: Correctly highlight comments after import lines.
kdefx
* Change asterisks on passwords to bullets.
kdeprint
* Fix printing of files with accentuated characters in filename or in
the path.
* Fix showing names of non local files in kprinter.
kio
* Don't crash when creating a job for an invalid URL.
* Hide the progress dialog while displaying the password dialog.
* Fix wrong "Couldn't receive DCOP signal" errors on RMB menu.
* Fix statusbar having more than one line.
* Fix possible data loss when using kioexec.
KJS
* Properly propagate some exception values.
* Fixed Number.toPrecision(n) calls on negative zero.
* Allow changing the internal value of invalid dates.
* Fix Unicode support in RegExp handling, and also be more robust
vs. embedded nulls. Fixes problems with some cyrillic characters in
gmail and makes google calendar somewhat work.
Remove the USE_TOOLS+=gawk:pkgsrc for Solaris as bootstrap now provides
a suitable awk.
Changes:
kdeinit
* Add protection against poor Linux OOM-killer heuristic.
Kate
* Support Q_DECLARE_INTERFACE-macro when coding Qt-code
* Don't enter "word selection mode" without an actual selection.
* Fixed another stringAtPos(-1) call.
KHTML
* Heavy DHTML optimizations for the case where the changes in the style
merely moves a layer, which is very common.
* Significant improvements in painting of inline elements, to be more
compliant with CSS 2.1 - section 10.8.1 and Appendix E-2; also includes
support for CSS 3 outline-offset.
* Support CSS3's hsv/hsva color values.
* Fixes to make the new yahoo photos site basically work: fix a bug in
XML parser and emission of scroll event.
* Fix a regression in performance of background painting.
* Properly compute length of utf-8 data in XMLHttpRequest.
* Support parsing of attribute/>.
* Evaluate scripts in <iframe src="javascript:..."> properly. Fixes some
of the product pages on amazon.com and the reader on freemail.hu.
* Permit faster auto-scrolling with the middle mouse button.
* Permit manually scrolling frames with keyboard et al. even if they have
scrolling=no.
* Don't miss some of the attribute changes relevant for restyling.
* Properly restyle when when an anchor stop being a link of becomes one.
* Properly honor bottom padding on scrolled overflow.
* Honor no-repeat in background when background offset is negative.
* Fixes in application of padding to inline elements.
* Various memory leak fixes, in particular in the element from ID or name
lookup caches, and some table and attribute node operations.
* Fix handling of <colgroup> elements without span attribute.
* Fixes in stacking order of elements with non-visible overflow.
* Fixing crash upon deleting cells from rows.
* Do not improperly reset text-align in tables in strict mode.
* Properly re-layout table caption if needed.
* Fixing two crashes in the capitalization code (regression).
* Fix crash on hover due to dangling placeholder box.
* Fix sometimes incorrect positioning of positioned elements having root
as containing block.
* Fixed crash when characterSet is accessed on newly-created document.
* Fix regression in <label> support.
* Support the add method on the options collection.
* Properly discard malformed content properties.
* Parse 'align' attribute of iframes.
* Make sure to properly escape ampersands in right-click google search.
* Resetting a SELECT with no default selection should not select the
first item if it's a multiple selection list.
* Do not let NodeIterators escape out of the root node.
* For percentage height calculation purposes, make body appear to have
the same height as the viewport (quirk mode).
* Properly account for overflows induced by inline-blocks and text-shadows.
* Remove incorrect addition of borders to layers which made some links
unclickable (regression).
* Fix mistake which made the viewport width be used instead of the root
block width when calculating the document width (regression).
* Make sure that when display:compact blocks are merged into a host block,
the height of the resulting block is at least that of the compact block.
* Do not limit single-line input elements to entry of 1024 characters.
* Do not try to run external VBScript; add the newly approved ECMAScript
mimetypes.
* Fix bug involving first-letter property where text fragments would
'disappear' (being offset far to the right or left) instead of breaking
to next line.
* Allow instanceof to work on most DOM objects (partial fix).
kjs
* Parse dates with ',', '-' and ':' where whitespace was expected.
Example: ",-:September,03,-:,2006, 13:53:02,-:"
* Do not crash when modifying an invalid date object.
* Fix locale-dependence in the parser, which resulted in floating point
numbers getting misparsed in some locales.
kio
* Set m_bDeep in all KServiceGroup constructors, or it may be used
uninitialized in load() and entries(). kbuildsycoca did this, and
valgrind caught it.
kdecore
* Pick correctly the best icon size. Also make -1,-1 return the largest
icon and not the first one (makes more sense and saying the first one
is as good as saying a random one).
* Be explicit about windowInfo() args.
* NET::Override is old and hated.
* Add support for more icon contexts in the icon loader.
* Search for icons also in $XDG_DATA_DIRS.
* Fix KSharedConfig to actually share readonly configs.
kdefx
* - "features" is clobbered by the longjmp, so mark it as volatile to
avoid that a clever compiler (gcc 4.2) optimizes reads away.
kdesu
* Add sudo support. See that bug for some remaining issues.
kdeui
* Don't draw a highlighting line above KPopupMenu title sections. It
looks very out-of-place, especially when using styles with rounded
PE_HeaderSections.
kdoctools
* Some extra entities required for 100% successful docs compilation.
kdeprint
* CUPS 1.2 support
* Show prettier urls.
knewstuff
* Unbreak "latest" and "most downloads" views.
* Fix memory leaks.
KWallet
* Fix deadlock with autocompletion popups.
* Associate wallet dialogs properly with main windows.
l10n
* Fix short date format for Turkish.
kdecore
* Fix compiling on Solaris.
kdeui
* Now KKeyChooser does not steal focus when created.
* Fixed the terrible flickering in KDateTable like for example when
resizing Kicker.
kio
* Make move not do a copy and delete in some cases.
* Fix problem with inotify causing crashes...
KIOslave
* Fixed referrer not sent back to client when using https.
KHTML
* Lots of fixes
kjs
* Enumerate array properties in order of addition, matching other
browsers.
* Support the "debugger" keyword.
kssl
* Increase usability of KIO KSSL dialog.
* Update netlock QA class certificate.
* Add startcom CA.
mimetypes
* Add *.tor pattern for bittorrent mimetype.
* Add x-mplayer2 (Microsoft media) mimetype.
and add a new helper target and script, "show-buildlink3", that outputs
a listing of the buildlink3.mk files included as well as the depth at
which they are included.
For example, "make show-buildlink3" in fonts/Xft2 displays:
zlib
fontconfig
iconv
zlib
freetype2
expat
freetype2
Xrender
renderproto
Changes:
* KHTML
o Don't crash when triple-clicking on a line that has :after or
:before content, or anything that isn't in the DOM
o Implement nondeterministic CSS matching
o Do not crash if an old target got destroyed.
o Fix static Y position of positioned objects in initial whitespace
(3.5 regression).
o Fontrendering: A few percent speedup by caching font scalability
info
o Konqueror will crash if a floated link uses :hover:before or
:hover:after to create a positioned element.
o Text selection misbehaves for devanagari.
o Fix crash when hovering a HTML menu item
o Don't crash when null pointer passed to removeEventListener
o Prevent an infinite loop in parseToken() when dealing with broken
HTML.
o If we saved creating a renderer at attach. Create it if we later
need it.
o Don't allow to find text in password fields.
o Improve XHTML CSS styling
o Handle CSS restyling for all types of dynamic DOM changes and
user interaction
o Only repaint the expossed background when scrolling. Optimizes a
few slow pages with unoptimized X11 drivers.
o Speed-up painting and selections on pages with large tables.
o Match better the error-handling capabilities of Firefox with
respect to DL/DT/DD elements.
o Added missing sanity check which caused crashes in caret mode on
pgup/pgdn when there was no valid caret.
o Make sure copyBlt doesn't fail because of different depth.
o No other property depends on background-image, and applying it
before the rest of the background short-hand breaks it under
inheritance.
* KIO
o Add media kioslave support to KFileDialog
o KPropertiesDialog first renames the file, then allows all plugins
to save their changes.
o Make KDirSelectDialog work with media:/ and similar. Fixes JuK.
* KDEPrint
o Fix usage of private methods in CUPS which broke KDEPrint with
CUPS 1.2
o Allow adding multiple file to the to-be-printed list.
o No fax sent when special characters are included in the sender
information
o Kdeprintfax ignores paper size setting when using Hylafax
* KDE-UI
o Use KConfigGroup to reset the config group automatically.
o Give a possibility to disable spellchecking.
* KIO-Slaves
o KIO-HTTP
o Keep the fragment when doing redirections. (the HTTP requests
and redirections don't include fragments; it's a browser thing).
PKGLOCALEDIR and which install their locale files directly under
${PREFIX}/${PKGLOCALEDIR} and sort the PLIST file entries. From now
on, pkgsrc/mk/plist/plist-locale.awk will automatically handle
transforming the PLIST to refer to the correct locale directory.
RECOMMENDED is removed. It becomes ABI_DEPENDS.
BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo.
BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo.
BUILDLINK_DEPENDS does not change.
IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS
which defaults to "yes".
Added to obsolete.mk checking for IGNORE_RECOMMENDED.
I did not manually go through and fix any aesthetic tab/spacing issues.
I have tested the above patch on DragonFly building and packaging
subversion and pkglint and their many dependencies.
I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I
have used IGNORE_RECOMMENDED for a long time). I have been an active user
of IGNORE_RECOMMENDED since it was available.
As suggested, I removed the documentation sentences suggesting bumping for
"security" issues.
As discussed on tech-pkg.
I will commit to revbump, pkglint, pkg_install, createbuildlink separately.
Note that if you use wip, it will fail! I will commit to pkgsrc-wip
later (within day).
* Don't restore files to recent files list that don't exist anymore.
* KIO-KFile: Fix problems with mounting filesystems with ACL
* Kate
o Make the spelling dialog modal.
o Make updates incrementally and limit to 2000 messages
o Alternate Bash heredoc style highlights correctly.
* KHTML
o Performance improvements:
+ Improve rendering speed of some semi-transparent pixmap
backgrounds.
+ Improve performance of JavaScript error logging widget, to
help deal with sites with completely broken JavaScript which
continuously causes errors.
+ Better performance for the classname selector
o Get iframes, objects and some other overlaid widgets to obey
their stacking context at last (a.k.a, keep flash and iframes
*under* dhtml menus).
o Implement CSS2.1 quirk about behavior of overflow and root and
body. Now we pass Acid2 according to Opera's standard, but in
an actual release version.
o Implement selectionStart, selectionEnd, setSelectionRange on
textarea and text input tags.
o Improved keyboard event support, implementing the API in the
latest DOM3 Events working group note.
o Properly scale CSS line height when zooming.
o Multiple fixes to the table DOM.
o Better frame sizing calculation.
o Better handling of the case where form-related tags get moved
by parser during residual style handling.
o Fix the DOM operation handling to not be so picky about the
DTD. This makes us match other browsers better, and lets us
remove various evil hacks in the XML parser
o Various getComputedStyle improvements.
o Various text-indent fixes.
o Some fixes for namespace handling in XML and CSS.
o Compatibility improvements in some collections.
o Fix JavaScript timer events over midnight.
o Fix handling of error event.
o Do not assign the same AccessKey to different javascript:
links.
o Do not improperly honor maxlength on file input elements.
o Properly reload iframe when source re-set.
o Make usemap case-insensitive.
o Better parsing of malformed cols and rows parameters of
textarea.
o Various fixes to DOM and non-standard bindings to CSS.
o Various rendering fixes
* KJS
o Performance fix: do not redundantly re-attach the JavaScript
debugger.
o Free up some "future reserved keywords" for use as identifiers,
to match other browsers.
o Accept trailing semicolons in initializer lists.
o Various RegExp object improvements: support .compile, properly
report some errors, plug some memory leaks.
o Give JavaScript debugger some stack room to operate when
handling stack overflow exceptions.
o Fix bugs in latin1 to ucs conversion.
