Title: [175034] releases/WebKitGTK/webkit-2.4/Source/WebKit2
- Revision
- 175034
- Author
- [email protected]
- Date
- 2014-10-22 03:01:59 -0700 (Wed, 22 Oct 2014)
Log Message
Merge r174861 - [GTK] Improve documentation of webkit_web_view_get_tls_info()
https://bugs.webkit.org/show_bug.cgi?id=137852
Patch by Michael Catanzaro <[email protected]> on 2014-10-18
Reviewed by Martin Robinson.
* UIProcess/API/gtk/WebKitWebView.cpp:
Modified Paths
Diff
Modified: releases/WebKitGTK/webkit-2.4/Source/WebKit2/ChangeLog (175033 => 175034)
--- releases/WebKitGTK/webkit-2.4/Source/WebKit2/ChangeLog 2014-10-22 09:59:37 UTC (rev 175033)
+++ releases/WebKitGTK/webkit-2.4/Source/WebKit2/ChangeLog 2014-10-22 10:01:59 UTC (rev 175034)
@@ -1,3 +1,12 @@
+2014-10-18 Michael Catanzaro <[email protected]>
+
+ [GTK] Improve documentation of webkit_web_view_get_tls_info()
+ https://bugs.webkit.org/show_bug.cgi?id=137852
+
+ Reviewed by Martin Robinson.
+
+ * UIProcess/API/gtk/WebKitWebView.cpp:
+
2014-08-26 Carlos Garcia Campos <[email protected]>
[GTK] Translations are not initialized in the UI process
Modified: releases/WebKitGTK/webkit-2.4/Source/WebKit2/UIProcess/API/gtk/WebKitWebView.cpp (175033 => 175034)
--- releases/WebKitGTK/webkit-2.4/Source/WebKit2/UIProcess/API/gtk/WebKitWebView.cpp 2014-10-22 09:59:37 UTC (rev 175033)
+++ releases/WebKitGTK/webkit-2.4/Source/WebKit2/UIProcess/API/gtk/WebKitWebView.cpp 2014-10-22 10:01:59 UTC (rev 175034)
@@ -3064,7 +3064,7 @@
* @certificate: (out) (transfer none): return location for a #GTlsCertificate
* @errors: (out): return location for a #GTlsCertificateFlags the verification status of @certificate
*
- * Retrieves the #GTlsCertificate associated with the @web_view connection,
+ * Retrieves the #GTlsCertificate associated with the main resource of @web_view,
* and the #GTlsCertificateFlags showing what problems, if any, have been found
* with that certificate.
* If the connection is not HTTPS, this function returns %FALSE.
@@ -3072,6 +3072,13 @@
* server, so you can connect to #WebKitWebView::load-changed and call this function
* when it's emitted with %WEBKIT_LOAD_COMMITTED event.
*
+ * Note that this function provides no information about the security of the web
+ * page if the current #WebKitTLSErrorsPolicy is %WEBKIT_TLS_ERRORS_POLICY_IGNORE,
+ * as subresources of the page may be controlled by an attacker. This function
+ * may safely be used to determine the security status of the current page only
+ * if the current #WebKitTLSErrorsPolicy is %WEBKIT_TLS_ERRORS_POLICY_FAIL, in
+ * which case subresources that fail certificate verification will be blocked.
+ *
* Returns: %TRUE if the @web_view connection uses HTTPS and a response has been received
* from the server, or %FALSE otherwise.
*/
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
