============================================================================= Dillo project ============================================================================= dillo-0.8.6 [Apr 26, 2006] - * Designed and implemented a dpi protocol library (libDpip.a in /dpip). * Added a couple of new dpip commands. * Fixed and uniformed the escaping of values inside dpip tags. * Ported the bookmarks, download, file, https, ftp and hello plugins, plus the dpid daemon and the rest of the source tree to use it. * Improved the dpi buffer reception to handle split buffers (This was required for handling arbitrary data streams with dpip). * Fixed a bug in Cache_entry_remove_raw. * Added a couple of "const" and C++ wrappers to dpiutil's API. * Fixed a serious bug with the FTP plugin that led to two downloads of the same file when left-clicking a non-viewable file. * Added MIME/type detection to the FTP plugin, and removed popen(). * Set the dpi daemon (dpid) not to exit when the downloads dpi is running. * Improved the accuracy of the illegal-character error reporting for URLs. * Now save dialog replaces %20 and ' ' with '_' in the Filename suggestion. * Made URL ADT automatically count and strip illegal characters from URLs. * Added dpi/downloads.cc (Default FLTK2-based GUI for downloads dpi). * Added "./configure --disable-dlgui" to build without FLTK2-GUI downloads. * Fixed dpip's tag syntax and its parsing to accept any value string. * Added DOCTYPE parsing (for better bug-meter error messages). * Added a DOCTYPE type declaration tag to dpi-generated HTML. * Fixed bookmarks dpi to escape ' in URLs and &<>"' in titles (BUG#655). * Added a check for malicious image sizes in IMG tags. * Made the parser aware of buggy pages with multiple BODY and HTML elements. * Fixed a bug in MIME content/type detection. * Check HTTP Content-Type against real data (a security procedure). Patches: Jorge Arellano - * Added a datauri dpi to handle "data:" URIs (RFC-2397). Patch: Jorge Arellano, Ben Wiley Sittler - * Moved the cookies management into a dpi server: cookies.dpi. * Removed the restriction of only one dillo with cookies enabled! * Fixed a bug with cookies for sites with self-signed certificate. * Updated the cookies documentation. * Made the downloads plugin dillo-cookie aware. * Ported the cookies dpi to libDpip.a. * Merged the new dpip code into the source tree. Patches: Diego Sáenz, Jorge Arellano - * Added "./configure --disable-threaded-dns" (for some non reentrant BSDs). Patch: Jorge Arellano, Francis Daly - * Fixed a bug with roman literals divisible by 10 (BUG#700). * Fixed a bug with long alphabetically ordered lists (BUG#704). Patch: Glyn Kennington - * Fixed a file descriptor leak in the dpi protocol library. * Fixed a subtle segfault bug with malformed URLs in cookies.c. Patch: Francis Daly dillo-0.8.5 [Jun 15, 2005] - * Set "file:" to work as URI for current directory. Patch: Diego Sáenz - * Added a "small" dillorc option for panel size (medium without labels). Patch: Eugeniy, Jorge Arellano - * Fixed the shell escaping code in the ftp plugin. * Added some checks for sane values in html.c. * Added URL filtering to the ftp and downloads dpis to avoid SMTP hacks. * Fixed the file dpi to react to the DpiBye command. Patches: Jorge Arellano dillo-0.8.4 [Jan 11, 2005] - * Fixed a possible attack (program abortion) by malicious web pages, which contain huge values for attributes "colspan" and "rowspan". * Changed anchors, they are now tested to be unique, and removed properly, when a widget tree is changed (e.g. another page is visited). Also added HTML warnings. Patches: Sebastian Geerken - * Fixed two minor memory leaks (IO's Buf1Start & html's SPCBuf). * Fixed handling of XML's "/>" tag-closing (e.g.