From me at the-compiler.org  Sat Nov  5 23:45:18 2016
From: me at the-compiler.org (Florian Bruhin)
Date: Sat, 5 Nov 2016 23:45:18 +0100
Subject: [qutebrowser-announce] qutebrowser v0.8.3 released!
Message-ID: <20161105224518.6d3hrxbnftlyzzyu@tonks>

Hi,

I just released qutebrowser v0.8.3 with a handful of bugfixes:

- Fixed crash when doing `:<space><enter>`, another corner-case
  introduced in v0.8.0
- Fixed `:open-editor` (`<Ctrl-e>`) on Windows
- Fixed crash when setting `general -> auto-save-interval` to a too
  big value.
- Fixed crash when using hints on Void Linux.
- Fixed compatibility with Python 3.5.2+ on Debian unstable
- Compatibility with pdfjs v1.6.210
- `:bind` can now be used to bind to an alias (binding by editing
  `keys.conf` already worked before)
- The command completion now updates correctly when changing aliases
- The tabbar now displays correctly with the Adwaita Qt theme
- The default `sk` keybinding now sets the commandline to `:bind`
  correctly
- Fixed crash when closing a window without focusing it

This is a bugfix-only release, but hopefully a bigger one with a lot
of changes will follow somewhen in the next few weeks.

As usual, the source/Linux release is available, while Windows was
"Working on updates..." and OS X is rebuilding Qt because it was
broken somehow - so those will follow later.

Florian

-- 
http://www.the-compiler.org | me at the-compiler.org (Mail/XMPP)
   GPG: 916E B0C8 FD55 A072 | http://the-compiler.org/pubkey.asc
         I love long mails! | http://email.is-not-s.ms/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
URL: <https://listi.jpberlin.de/pipermail/qutebrowser-announce/attachments/20161105/45193a71/attachment.asc>

From me at the-compiler.org  Sun Nov  6 01:01:15 2016
From: me at the-compiler.org (Florian Bruhin)
Date: Sun, 6 Nov 2016 01:01:15 +0100
Subject: [qutebrowser-announce] qutebrowser v0.8.4 released!
In-Reply-To: <20161105224518.6d3hrxbnftlyzzyu@tonks>
References: <20161105224518.6d3hrxbnftlyzzyu@tonks>
Message-ID: <20161106000115.picuj64pcn6woukk@tonks>

Hi,

* Florian Bruhin <me at the-compiler.org> [2016-11-05 23:45:18 +0100]:
> I just released qutebrowser v0.8.3 with a handful of bugfixes:

Unfortunately a fix in v0.8.3 broke compatibility with Python 3.4
which was fixed on master but not backported to the v0.8.x branch.

Since I'm running Python 3.5, I didn't catch that in time - so I just
released v0.8.4 to fix that.

The source release is up, Windows packages are too, OS X and Debian
packages will probably need another day or two.

Florian

-- 
http://www.the-compiler.org | me at the-compiler.org (Mail/XMPP)
   GPG: 916E B0C8 FD55 A072 | http://the-compiler.org/pubkey.asc
         I love long mails! | http://email.is-not-s.ms/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
URL: <https://listi.jpberlin.de/pipermail/qutebrowser-announce/attachments/20161106/9e5c844c/attachment.asc>

From me at the-compiler.org  Tue Nov 22 22:10:00 2016
From: me at the-compiler.org (Florian Bruhin)
Date: Tue, 22 Nov 2016 22:10:00 +0100
Subject: [qutebrowser-announce] qutebrowser v0.8.4 released!
In-Reply-To: <20161106000115.picuj64pcn6woukk@tonks>
References: <20161105224518.6d3hrxbnftlyzzyu@tonks>
 <20161106000115.picuj64pcn6woukk@tonks>
Message-ID: <20161122211000.qecb5drwqzfrivz7@tonks>

Hey,

it took a bit longer than expected, but the OS X .dmg as well as the
.deb are now online for v0.8.4 too.

Florian

-- 
http://www.the-compiler.org | me at the-compiler.org (Mail/XMPP)
   GPG: 916E B0C8 FD55 A072 | http://the-compiler.org/pubkey.asc
         I love long mails! | http://email.is-not-s.ms/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
URL: <https://listi.jpberlin.de/pipermail/qutebrowser-announce/attachments/20161122/ecb559e2/attachment.asc>

From me at the-compiler.org  Wed Nov 23 08:22:57 2016
From: me at the-compiler.org (Florian Bruhin)
Date: Wed, 23 Nov 2016 08:22:57 +0100
Subject: [qutebrowser-announce] Security issue with QtWebEngine web inspector
Message-ID: <20161123072257.akcz4ovzws4ip4bo@tonks>

Hi,

if you're using qutebrowser from git with --backend webengine and have
general -> developer-extras enabled, the inspector runs on a port
bound to localhost (which is the only way to access it currently).

However, this is not as unproblematic as it might seem, and might
actually allow any website to access the inspector (and thus control
other websites): http://bouk.co/blog/hacking-developers/

Until there's a better solution in QtWebEngine, I'd recommend not
enabling the web inspector when navigating to untrusted websites.

The newest git commit now disables the web inspector (even with
developer-extras enabled) and requires a --enable-webengine-inspector
commandline switch to enable it. If you can't update for some reason,
disabling developer-extras and restarting qutebrowser will have the
same effect.

If you aren't using --backend webengine, or aren't using qutebrowser
from git, or have developer-extras disabled, this does not affect you
in any way.

Florian

-- 
http://www.the-compiler.org | me at the-compiler.org (Mail/XMPP)
   GPG: 916E B0C8 FD55 A072 | http://the-compiler.org/pubkey.asc
         I love long mails! | http://email.is-not-s.ms/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
URL: <https://listi.jpberlin.de/pipermail/qutebrowser-announce/attachments/20161123/8d66516b/attachment.asc>