On Friday, 22 May 2015 15:54:02 CEST, Thomas Lübking wrote:
For a maybe insane brainstorm: could one, in theory, organize
parts in iframes?
There's this nice QWebSettings::FrameFlatteningEnabled flag
which should pretty much do what the current, rather complex,
"create a layouted workarea" does - and as bonus, there'll be
only one view to print :)
That would also remove the need for our, er, "tweak" to disable QWebView's
built-in scrollbars. The downside of this is that the current code mixes
custom widgets for attachments with untrusted HTML code retrieved from
IMAP. If we switch to iframes, we have to enable at least requesting these
custom widgets via a special markup (see "Qt Based Plugins" in [1]).
I can see some security impact of this -- first of all, it increases the
functionality which is enabled within WebKit and available to the untrusted
content. Second, it supports almost arbitrary nesting of the MIME structure
once again, but that's already possible via the cid: URL scheme and we do
guard against that already.
Patches which try to explore this area are welcome, I'm quite sure I won't
have time for this during 2015 :(.
Cheers,
Jan
[1] https://trac.webkit.org/wiki/QtWebKitPlugins
--
Trojitá, a fast Qt IMAP e-mail client -- http://trojita.flaska.net/
