Title: [174982] releases/WebKitGTK/webkit-2.6/Source/WebKit2
- Revision
- 174982
- Author
- [email protected]
- Date
- 2014-10-21 10:00:51 -0700 (Tue, 21 Oct 2014)
Log Message
Merge r174861 - [GTK] Improve documentation of webkit_web_view_get_tls_info()
https://bugs.webkit.org/show_bug.cgi?id=137852
Patch by Michael Catanzaro <[email protected]> on 2014-10-18
Reviewed by Martin Robinson.
* UIProcess/API/gtk/WebKitWebView.cpp:
Modified Paths
Diff
Modified: releases/WebKitGTK/webkit-2.6/Source/WebKit2/ChangeLog (174981 => 174982)
--- releases/WebKitGTK/webkit-2.6/Source/WebKit2/ChangeLog 2014-10-21 16:58:51 UTC (rev 174981)
+++ releases/WebKitGTK/webkit-2.6/Source/WebKit2/ChangeLog 2014-10-21 17:00:51 UTC (rev 174982)
@@ -1,3 +1,12 @@
+2014-10-18 Michael Catanzaro <[email protected]>
+
+ [GTK] Improve documentation of webkit_web_view_get_tls_info()
+ https://bugs.webkit.org/show_bug.cgi?id=137852
+
+ Reviewed by Martin Robinson.
+
+ * UIProcess/API/gtk/WebKitWebView.cpp:
+
2014-10-14 Alexey Proskuryakov <[email protected]>
REGRESSION (r165356): Issues with Japanese text input
Modified: releases/WebKitGTK/webkit-2.6/Source/WebKit2/UIProcess/API/gtk/WebKitWebView.cpp (174981 => 174982)
--- releases/WebKitGTK/webkit-2.6/Source/WebKit2/UIProcess/API/gtk/WebKitWebView.cpp 2014-10-21 16:58:51 UTC (rev 174981)
+++ releases/WebKitGTK/webkit-2.6/Source/WebKit2/UIProcess/API/gtk/WebKitWebView.cpp 2014-10-21 17:00:51 UTC (rev 174982)
@@ -3185,7 +3185,7 @@
* @certificate: (out) (transfer none): return location for a #GTlsCertificate
* @errors: (out): return location for a #GTlsCertificateFlags the verification status of @certificate
*
- * Retrieves the #GTlsCertificate associated with the @web_view connection,
+ * Retrieves the #GTlsCertificate associated with the main resource of @web_view,
* and the #GTlsCertificateFlags showing what problems, if any, have been found
* with that certificate.
* If the connection is not HTTPS, this function returns %FALSE.
@@ -3193,6 +3193,13 @@
* server, so you can connect to #WebKitWebView::load-changed and call this function
* when it's emitted with %WEBKIT_LOAD_COMMITTED event.
*
+ * Note that this function provides no information about the security of the web
+ * page if the current #WebKitTLSErrorsPolicy is %WEBKIT_TLS_ERRORS_POLICY_IGNORE,
+ * as subresources of the page may be controlled by an attacker. This function
+ * may safely be used to determine the security status of the current page only
+ * if the current #WebKitTLSErrorsPolicy is %WEBKIT_TLS_ERRORS_POLICY_FAIL, in
+ * which case subresources that fail certificate verification will be blocked.
+ *
* Returns: %TRUE if the @web_view connection uses HTTPS and a response has been received
* from the server, or %FALSE otherwise.
*/
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
