On 08/07/2018 12:18:48 PM Tue, Albrecht Dreß wrote:
Hi Peter: Am 07.08.18 03:40 schrieb(en) Peter Bloomfield:We have a long-standing goal of dropping support for the security-challenged WebKit-1 HTML widget. A new GitLab branch 'drop-webkit1' implements it. Anyone who believes this might be a problem should check out the branch and test it. If no one reports an issue, it will be merged to master in one week.IMO, this is a really good idea! However, what about the GtkHtml support, shouldn't it be removed, too? I.e. leave webkit2 as only html option? Citing myself re. the status of GtkHtml: Am 08.07.18 14:57 schrieb(en) Albrecht Dreß:However, I wonder if the GtkHtml project is still alive. I don't see any Debian/Ubuntu packages, the NEWS on Github [1] is almost three years old, and the German Wikipedia states it's used in Evolution only, as all other projects moved to webkit2. Thus, if webkit2 is supported on all distos which are still maintained (true for Debian Jessie and Ubuntu Trusty at least), we might want to remove the support for gtkhtml and old webkit1 completely.Opinions?
Agreed, we should drop it. No current support, and unknown security status. The current Fedora package for evolution shows a WebKit dependence, not GtkHtml. I'll extend the branch to support only WebKit-2. Best, Peter
Attachment:
pgpAXL8mrgf_c.pgp
Description: PGP signature