summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* CRA mark src/core [1/6]Kaloyan Chehlarski2025-09-2524-0/+24
| | | | | | | | QUIP: 23 Fixes: QTBUG-138726 Pick-to: 6.10 6.9 6.8 Change-Id: Ieee01149fd953d712127b4e53e5056b47910a441 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* PdfSearchModel: change "not found in context" warning to qCDebugShawn Rutledge2025-09-241-1/+1
| | | | | | | | | It's noisy in practice. Pick-to: 6.8 6.10 Fixes: QTBUG-122766 Change-Id: I9c03ee6849568f6f52d55a0072becf11b9f8a50d Reviewed-by: Friedemann Kleint <Friedemann.Kleint@qt.io>
* Docs: Fix webEngineDesktopMediaRequest docsMichal Klocek2025-09-232-11/+12
| | | | | | | | | The underling type is now a qml value, update docs accordingly. Pick-to: 6.10 6.10.0 Change-Id: Ic25b5055802d1b1fe8dcc4a920e9a74d5d0f484f Reviewed-by: Ulf Hermann <ulf.hermann@qt.io>
* Warn if --ignore-gpu-blocklist breaks rendering with MesaPeter Varga2025-09-231-6/+55
| | | | | | | | Task-number: QTBUG-139335 Pick-to: 6.10 6.9 Change-Id: Idf869dc434639315fc1ede3f73dd0a2f3bb9076d Reviewed-by: Moss Heim <moss.heim@qt.io> Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Return to supporting eglCreateImage in EGLHelper::queryDmaBufMoss Heim2025-09-182-12/+134
| | | | | | | | | | | | | | | | | | eglCreateDRMImageMESA was removed in mesa 25.2. Keep using it where we can since this fixes support for panthor/panfrost, otherwise fall back to the old use of EGL API. Includes a revert of the following commits: Revert "Create EGLImage with eglCreateDRMImageMESA() for exporting dma_buf" This reverts commit 2ed5f9632292c6e531f353dae800cb12274af91a. Revert "Remove leftover QOffscreenSurface from EGLHelper" This reverts commit bcee2dbf412cc655c1b467091b581c696d234e3f. Pick-to: 6.9 6.10 6.10.0 Task-number: QTBUG-136257 Task-number: QTBUG-139424 Change-Id: Ie115bd6373ce0a80651781aa568405477010ee25 Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
* Fix -no-ssl buildPeter Varga2025-09-176-16/+46
| | | | | | | | Amends 671afae06 Add API for providing additional CA certificates Pick-to: 6.10 Change-Id: I7e40b9b24e319e89c94d13516ebbc896c8ba6f69 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* QWebEngineFrame: keep using RO0Marc Mutz2025-09-152-13/+6
| | | | | | | | | | | | | | | | | Amends 3ee3548e4c663402848db3b1336bf56e7c6d327e, which incorrectly and needlessly made the move SMFs out-of-line (move SMFs must always be inline in Qt). All these functions were already inline in 6.9, so keep it that way, just with explicit = default, which is how the 6.9 cherry-pick of said commit was also resolved. Found in API-Review. Pick-to: 6.10 6.10.0 Change-Id: I85595614fcb33c0ae545c751006d0b70a14d8629 Reviewed-by: Volker Hilsheimer <volker.hilsheimer@qt.io> Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumMichael Brüning2025-09-122-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty e0e59b7d..94daf4ca: * [Backport] CVE-2025-10201: Inappropriate implementation in Mojo * [Backport] CVE-2025-10200: Use after free in Serviceworker * [backport] Security bug 426429657 * [backport] CVE-2025-9866 * [fixup] Use ui::Compositor (3rdparty) * [fixup] Fixes for jumbo build * [fixup][gn] Add rsp target writer * [fixup] Add shorter include paths workaround * [fixup] Add user script data mojo interface and traits * [fixup] Add mojom for renderer_configuration * [fixup] Implement resourcesPrivate API * [fixup] Fix navigation when clicking on links in a PDF * [fixup] Add minimal webrtcdesktopcapture api for hangout services extension * minibgm: fix missing include libgen.h * Use -I for GN pkg_config include directories * [fixup][gcc-10] Fix compilation issue with gcc-10 Fixes: QTBUG-139776 Fixes: QTBUG-140070 Change-Id: I07b064b785653d990d8077b410b33581da9c3dde Reviewed-by: Moss Heim <moss.heim@qt.io>
* Doc: Fix type issues in WebEngineView QML docsKaloyan Chehlarski2025-09-101-9/+9
| | | | | | | | | | - QString -> string - QWebEngine... -> WebEngine... - Remove nonsense asterisks from method/signal parameter lists Pick-to: 6.10 Change-Id: I9ad262def8ab2a9513fb1b350e388e158a880269 Reviewed-by: Moss Heim <moss.heim@qt.io>
* Disable GBM if Ozone X11 is not availableMarcell Brauner2025-09-101-1/+9
| | | | | | | | | | | | | | | If certain X11 libraries are missing then the BUILDFLAG(IS_OZONE_X11) is false. In this case, the GLX code path is unable to create GBM buffer without Ozone X11 support. This results in the web view being empty and the warning messages are not helpful. To circumvent this, add a more meaningful warning message and fallback to a different rendering path. Pick-to: 6.10 6.9 6.8 Change-Id: Id4bc9a7e88c6f19713c764437138b92a3aee86e6 Reviewed-by: Moss Heim <moss.heim@qt.io> Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix typo in --disable-gpuMarcell Brauner2025-09-102-2/+2
| | | | | | | Pick-to: 6.10 6.9 6.8 Change-Id: Ifffe48cce9d0acb85c5aca398894c2d359626672 Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu> Reviewed-by: Moss Heim <moss.heim@qt.io>
* Docs: Fix documentation for qml type valuesMichal Klocek2025-09-107-37/+45
| | | | | | | | | Go though our value types docs and fix the capitalization. Add missing qdoc tags. Change-Id: I856a870a333647e656f0b53cad684f806392c6ec Reviewed-by: Ulf Hermann <ulf.hermann@qt.io> Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Doc: Slightly reword recentlyAudibleChanged descriptionKaloyan Chehlarski2025-09-081-3/+2
| | | | | | Pick-to: 6.10 Change-Id: Iea3603e13439c0e9e205fc4d99698a49bb8c6c44 Reviewed-by: Jaishree Vyas <jaishree.vyas@qt.io>
* Doc: Minor comma fixesKaloyan Chehlarski2025-09-082-4/+4
| | | | | | Pick-to: 6.10 Change-Id: I1ed24289af08aad651c93a09cb342dc9e8b71349 Reviewed-by: Jaishree Vyas <jaishree.vyas@qt.io>
* Doc: Fix unnecessary indentation in QWebEngineView snippetsKaloyan Chehlarski2025-09-081-7/+7
| | | | | | Pick-to: 6.10 Change-Id: Id8766117930315004512a65529642ea818125724 Reviewed-by: Jaishree Vyas <jaishree.vyas@qt.io>
* Doc: Prioritize CMake linking instructions over qmake onesKaloyan Chehlarski2025-09-081-5/+5
| | | | | | | | Also slightly reword the section to make it sound better. Pick-to: 6.10 Change-Id: I512f7acc17a28afb9514c8fed05c72d792133577 Reviewed-by: Jaishree Vyas <jaishree.vyas@qt.io>
* Doc: Expand size() and contentSize() definitionsKaloyan Chehlarski2025-09-084-4/+15
| | | | | | | | | These now mention what units the return sizes are in, and what effects high-DPI displays have. Pick-to: 6.10 Change-Id: Icdf0a2c36116d360d5cc158793694422cb33b0cc Reviewed-by: Jaishree Vyas <jaishree.vyas@qt.io>
* Doc: Add [since X.X] tags to enums that are missing themKaloyan Chehlarski2025-09-086-165/+156
| | | | | | Pick-to: 6.10 Change-Id: Ie121e22e18ef61d4c9ecb6fa9085889e742fb7be Reviewed-by: Jaishree Vyas <jaishree.vyas@qt.io>
* Use the built in ExtensionActionManagerMartin Negyokru2025-09-085-75/+10
| | | | | | | | | The built in manager is also used by extensions APIs. Task-number: QTBUG-61676 Pick-to: 6.10 Change-Id: Iebd20cc1e10e933436d3032ff1c8676f298d8353 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* QWebEngineExtensionManager: override QObject::event()Marc Mutz2025-09-082-0/+11
| | | | | | | | | | | | | | | | | | | A released class can, in general, not add new reimplementations of virtual functions, because code compiled against the old version will continue to directly call the old furthest-derived reimplementation (in the case at hand, that would be QObject::event()). This is called de-virtualization, and every compiler does it when overrides call the base class' implementation. As required by BC rules, add an event() reimplementation. This way, if in the next version we need to e.g. reimplement timerEvent(), we can do it instead in event(). Found in API-review. Pick-to: 6.10 6.10.0 Change-Id: I43386e3cb52a1eb6d80475446f013e4dad283227 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Docs: Fix gcc and clang documentationMichal Klocek2025-09-081-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In documentation we used only DOCUMENTATION_LINUX_PKG_CONFIG and DOCUMENTATION_LINUX_XCB tags so far and DOCUMENTATION_LINUX_PLATFORM tag was never referenced in generated docs. Therefore add missing tag to docs and remove obsolete info about compilers. Add missing clang check, make default to 17.0 for now. Improve capitalization to make it more consistent across bullet points. Correct misspelled LINUX_PLATFORM tags. The generated platform tag results in: On Linux, the following additional tools are required: * A pkg-config binary. * Glibc library at least 2.16 version or later. * Glib library at least 2.32.0 version or later. * Harfbuzz library at least 4.3.0 version or later. * Mesa development headers. * Nss library are least 3.26 version. * Libudev library. * Gcc version must be at least 10.0 to compile QtWebEngine * Clang version must be at least 17.0 to compile QtWebEngine. Pick-to: 6.10 Change-Id: I2f5302201094c5c8a22b7b42dad78046c421d47c Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
* Fix QML usage of QWebEngineFrameAllan Sandfeld Jensen2025-09-063-16/+35
| | | | | | | | | | It was considered incorrectly registered, and caused crashes when used. Pick-to: 6.10 6.9 6.8 Fixes: QTBUG-139710 Change-Id: I5d99c4e46274ead8330893e4d9e0aa7cc99aefc1 Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* CMake: Disable -webengine-full-debug-info on WindowsKaloyan Chehlarski2025-09-031-0/+2
| | | | | | | | | | | The PDB format is flawed, and has an effective size limit that stops us from being able to turn on Blink symbols. This change removes the option for Windows users. Fixes: QTBUG-139766 Pick-to: 6.10 6.9 Change-Id: Iddc31f46611cf586d5e2bb402937c0b8e3d43d37 Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* CRA mark src/core/extensionsSzabolcs David2025-09-0246-0/+46
| | | | | | Task-number: QTBUG-138719 Change-Id: I1782644b53aff0530cda58a3aac4b07b0ac651ec Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Disable chrome://extensions WebUI with off-the-record profilePeter Varga2025-09-021-2/+6
| | | | | | | | | | It is not supported, see ExtensionActionManager constructor in //extensions/browser/extension_action_manager.cc Task-number: QTBUG-61676 Pick-to: 6.10 Change-Id: I1b4dbe14fd3ff5e1b40ae7fda2b93e4c93945e8c Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Docs: Fix navigation between qml user script collection and web scriptMichal Klocek2025-09-012-15/+15
| | | | | | | | | | | | Use lower case for webEngineScript. Use correct 'qmlvaluetype' section. This amends 1eb2cb02f7ebdfc15a0d2ddc7837d4cffe073006. Fixes: QTBUG-139624 Pick-to: 6.10 6.9 Change-Id: I4766ac876401ac2937af33383dfad48a5f6d1498 Reviewed-by: Ulf Hermann <ulf.hermann@qt.io>
* Docs: Fix user script collections docMichal Klocek2025-09-011-2/+2
| | | | | | | | We replaced js array with a qml list for user script collection. Pick-to: 6.10 6.9 Change-Id: Ibef8443c89127cde784aa8e25d62259ad86c51c1 Reviewed-by: Ulf Hermann <ulf.hermann@qt.io>
* Load extensions as kUnpackedMartin Negyokru2025-08-291-4/+1
| | | | | | | | | | | | The kComponent type was meant for internal extensions, kUnpacked is more strict eg. it needs permission to run on specific urls. Extensions loaded in chrome's webui are also loaded as kUnpacked. Task-number: QTBUG-61676 Pick-to: 6.10 Change-Id: Ic075e98059d187b355f984ccc90ddd216cc7e09c Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
* Move default constructors out of lineAllan Sandfeld Jensen2025-08-284-2/+9
| | | | | | | | Were only added them for the Qt metatype system Pick-to: 6.10 Change-Id: I805187986a7b0f19316406e82173b84bdc1c3f4c Reviewed-by: Marc Mutz <marc.mutz@qt.io>
* Remove unnecessary QQmlEngine usageAllan Sandfeld Jensen2025-08-2611-174/+19
| | | | | | | | | | Reverts most of f5fbc34fc16fc9c6e7f7e8bbbf60f5b343b9466d, relying on better implicit QML conversion since. Fixes: QTBUG-138881 Pick-to: 6.10 6.9 6.8 Change-Id: Ic23579e421f737b9a4d85c7e4f1a4019323c4be9 Reviewed-by: Ulf Hermann <ulf.hermann@qt.io>
* Doc: Minor inaccuracy fixesKaloyan Chehlarski2025-08-251-3/+3
| | | | | | Pick-to: 6.10 Change-Id: I7e9b778648b567b0996eed7a7acf79312ee24a5a Reviewed-by: Jaishree Vyas <jaishree.vyas@qt.io>
* Doc: Remove featurePermissionRequestCanceled definitionKaloyan Chehlarski2025-08-251-3/+0
| | | | | | | | The signal is deprecated and never emitted. Pick-to: 6.10 Change-Id: Id56f52accffe25c35dc265e4eaa09b0d07fff4d2 Reviewed-by: Jaishree Vyas <jaishree.vyas@qt.io>
* Doc: Expand some definitions in WebEngineHistory documentationKaloyan Chehlarski2025-08-251-3/+12
| | | | | | Pick-to: 6.10 Change-Id: I7cd6ab15d470321f8d830930d8e21e33a5a53be4 Reviewed-by: Jaishree Vyas <jaishree.vyas@qt.io>
* Doc: Synchronize some QML and Widgets documentationKaloyan Chehlarski2025-08-252-3/+32
| | | | | | | | | Copied over information that was only present on one side, but missing on the other. Pick-to: 6.10 Change-Id: I673cfdd7d3e86c1432d035e8902cb9e859e7fcda Reviewed-by: Jaishree Vyas <jaishree.vyas@qt.io>
* Doc: Mention Cmd/Ctrl instead of just CtrlKaloyan Chehlarski2025-08-252-2/+2
| | | | | | Pick-to: 6.10 Change-Id: I3275c5dc5c96aa32210972844f1ee65591ab028b Reviewed-by: Jaishree Vyas <jaishree.vyas@qt.io>
* CMake: Improve deployment or resources on LinuxMichal Klocek2025-08-241-19/+53
| | | | | | | | | | | | | | On Linux we use cmake deployment api and even though mixing different build types of user application and Qt itself is allowed and complies fine, it did not work well with deployment of resources which was just checking active deployment for resource files. Therefore, add the fallback option. In case of missing resources of given type assume the 'candidate' option is always right. Pick-to: 6.10 6.9 Change-Id: Iec610e2d68f29d2b1242703b2210cc96ff3f7354 Reviewed-by: Alexandru Croitor <alexandru.croitor@qt.io>
* CMake: Fix deployment path for qt.confMichal Klocek2025-08-241-1/+1
| | | | | | | | | | | | | | The install_destination was meant to be used only with FILE(INSTALL ...) and qt6_deploy_qt_conf takes absolute path so destdir_destination should be used instead. This amends cf2d52b0b9287714c2fa99a9eb94a62f1585d576. Fixes: QTBUG-139322 Pick-to: 6.10 6.9 Change-Id: Iac8da5fd161edc3edfac68dd3b4f613f442be1c2 Reviewed-by: Alexandru Croitor <alexandru.croitor@qt.io>
* Update ChromiumMichael Brüning2025-08-222-1/+1
| | | | | | | | | | | | | | | Submodule src/3rdparty e94c0f36..e0e59b7d: * [Backport] CVE-2025-9132: Out of bounds write in V8 * [Backport] CVE-2025-8901: Out of bounds write in ANGLE * [Backport] CVE-2025-8881: Inappropriate implementation in File Picker * [Backport] CVE-2025-8879: Heap buffer overflow in libaom * [Backport] CVE-2025-8880: Race in V8 Pick-to: 6.10 Fixes: QTBUG-139299 Fixes: QTBUG-139397 Change-Id: I5dc873943d2e50766dc53063f85f7b4af650468b Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Mark extensionManager as a constantAllan Sandfeld Jensen2025-08-201-1/+1
| | | | | | Pick-to: 6.10 Change-Id: I93acb15935ac43baf72006e2e563c5485f7e173d Reviewed-by: Fabian Kosmale <fabian.kosmale@qt.io>
* Associate permissions with framesKaloyan Chehlarski2025-08-2018-427/+554
| | | | | | | | | | | | | | | | | | | | | | | | | | Previously, permisions were associated with the originating WebContents, as the PermissionManager API uses those in its function calls. This is insufficient, however, as it results in iframes not receiving the correct permissions (because they were instead granted to the root frame instead. This change modifies the internals of PermissionManagerQt to use GlobalRenderFrameHostTokens, and modifies relevant functions across the codebase to pass those around instead of WebContents. Media and mouse lock permissions now also query the permission manager before issuing a request, which avoids some cases of the same request being sent multiple times in a row. As a side effect, the behavior of non-persistent permissions (as well as the behavior of ALL permissions when running in AskEveryTime mode) is standardized so that a permission is remembered as long as the associated frame is alive. Fixes: QTBUG-134637 Fixes: QTBUG-135787 Pick-to: 6.10 6.9 Change-Id: I650e3328ef3830d06206acafc3305566d3a10d86 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumKaloyan Chehlarski2025-08-192-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty b5f55adaf..e94c0f365 > [Backport] CVE-2025-8582: Insufficient validation of untrusted input in DOM > Do not use AVX intrinsics in non-AVX mode > Fix nullptr access in D3DImageBackingFactory when using Dawn > [fixup][msvc] Rewrite directives from function-like macro parameters > Disable DCHECK in audio_input_device.cc > [fixup] [Backport] CVE-2025-8576: Use after free in Extensions > [fixup] Fix Chrome resources and WebUI we need > [Backport] Security bug 421544815 > [Backport] CVE-2025-8580: Inappropriate implementation in Filesystems > [Backport] CVE-2025-8578: Use after free in Cast > [Backport] CVE-2025-8576: Use after free in Extensions > Avoid crashing on authentication with use_bluez=false > Avoid crash or UB on access of data being destroyed > [fixup][extensions] Adapt Extensions for WebEngine > [extensions] Adapt Extensions for WebEngine Task-number: QTBUG-138965 Pick-to: 6.10 Change-Id: I22f27ae8681075f325f289f80b0e657408ee96d2 Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Export qml extension types in webenginequickAllan Sandfeld Jensen2025-08-173-7/+24
| | | | | | | | From API review. Pick-to: 6.10 Change-Id: Ibcdf7780d1c03f601a703b35118d0b439e4df62c Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix case of QML webEngineScript documentationAllan Sandfeld Jensen2025-08-161-9/+9
| | | | | | Pick-to: 6.10 6.9 6.8 Change-Id: Ia7e65f9050a1e57a3a2c7da69088e68fc7874ef1 Reviewed-by: Ulf Hermann <ulf.hermann@qt.io>
* Update ChromiumAllan Sandfeld Jensen2025-08-161-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty 40948d169..b5f55adaf > [Backport] Security bug 431828026 > [Backport] CVE-2025-8292: Use after free in Media Stream > [Backport] Security bug 432661300 > [Backport] Security bug 431668129 > [Backport] Security bug 428177287 > [Backport] CVE-2025-8010: Type Confusion in V8 > [Backport] Security bug 428754691 > [Backport] CVE-2025-7657: Use after free in WebRTC > [Backport] CVE-2025-7656: Integer overflow in V8 > [Backport] Security bug 424905890 > [Backport] Security bug 427316421 > [fixup] Fix QtWebEngine build on Windows > [fixup] Fix QtWebEngine build on Windows > [fixup] Fix QtWebEngine build on all platforms > [fixup] [Backport] CVE-2025-4052: Inappropriate implementation in DevTools > [Backport] CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU (2/2) > [Backport] CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU (1/2) > [fixup] [Backport] [Backport] Security bugs 398049412 and 403696324 (3/3) > [fixup] [Backport] [Backport] Security bugs 398049412 and 403696324 (2/3) > [fixup] [Backport] Security bug 420885124 > [fixup] [Backport] [Backport] Security bugs 398049412 and 403696324 (1/3) > [fixup] [Backport] Security bug 391114794 > [Backport] CVE-2025-6554: Type Confusion in V8 > [Backport] Security bug 421629753 > [Backport] CVE-2025-6556: Insufficient policy enforcement in Loader > [Backport] CVE-2025-6557: Insufficient data validation in DevTools > [Backport] Security bug 420885124 > [Backport] Security bug 412149700 > [Backport] Security bug 412400167 > [Backport] Security bug 415397143 > [Backport] CVE-2019-16707 / Security bug 408928790 > [Backport] CVE-2024-50602 / Security bug 408294914 > [Backport] CVE-2025-5283: Use after free in libvpx > [Backport] CVE-2025-5065: Inappropriate implementation in FileSystemAccess API > [Backport] CVE-2025-5064: Inappropriate implementation in Background Fetch > [Backport] CVE-2025-5281: Inappropriate implementation in BFCache > [Backport] CVE-2025-5280: Out of bounds write in V8 > [Backport] CVE-2025-5063: Use after free in Compositing > [Backport] Fixup for bugs 414858409 and 413080347 > [Backport] Security bug 413080347 > [Backport] Security bug 414858409 (2/2) > [Backport] Security bug 414858409 (1/2) > [Backport] CVE-2025-4609: Incorrect handle provided in unspecified circumstances in Mojo > [Backport] CVE-2025-4664: Insufficient policy enforcement in Loader > [Backport] CVE-2025-3277 > [Backport] Security bugs 398049412 and 403696324 > [Backport] Security bug 403364367 > [Backport] CVE-2025-4052: Inappropriate implementation in DevTools > [Backport] CVE-2025-4051: Insufficient data validation in DevTools > [Backport] CVE-2025-4096: Heap buffer overflow in HTML > [Backport] Security bug 416535738 > [Backport] CVE-2025-6192: Use after free in Profiler > [Backport] CVE-2025-6191: Integer overflow in V8 > [Backport] Security bug 409243443 > [Backport] Security bug 407368915 > [Backport] CVE-2025-3071: Inappropriate implementation in Navigations > [Backport] Security bug 391114794 > [Backport] CVE-2025-3069: Inappropriate implementation in Extensions > [Backport] Security bug 396460489 (2/2) > [Backport] Security bug 396460489 (1/2) > [Backport] Security bug 397187119 > [Backport] Security bug 399002829 > [fixup][rust] Build without rust crash support > [fixup] Fix QtWebEngine build on Windows > [fixup][extensions] Adapt Extensions for WebEngine > [extensions] Adapt Extensions for WebEngine Pick-to: 6.10 Change-Id: I7ea749a0807540dec2519a6dcb16559392182781 Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* CRA mark src/core/custom_handlersKaloyan Chehlarski2025-08-167-0/+8
| | | | | | | | QUIP: 23 Task-number: QTBUG-138725 Pick-to: 6.10 6.9 6.8 Change-Id: Ic774a8415afdc198aab88f19e7f6b860ec766728 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* CRA mark src/core/printingKaloyan Chehlarski2025-08-1612-0/+12
| | | | | | | | QUIP: 23 Task-number: QTBUG-138725 Pick-to: 6.10 6.9 6.8 Change-Id: I53074540f4340b1e8b20de5fa3c90f75db45547b Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* CRA mark src/core/toolsKaloyan Chehlarski2025-08-161-0/+1
| | | | | | | | QUIP: 23 Task-number: QTBUG-138725 Pick-to: 6.10 6.9 6.8 Change-Id: I2cebf8b03edc00bc6fb1e7c034311cb9fe763139 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix unused argument warningsAllan Sandfeld Jensen2025-08-152-3/+3
| | | | | | | | use_qt called use_qt5 now, and libevent no longer appear used Change-Id: Ia50100c9c0ad43218ee8daff25b43dd036f41001 Pick-to: 6.10 Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
* WebEngineQuick: Expose QWebEngineClientHints to QMLOlivier De Cannière2025-08-152-5/+10
| | | | | | | | | | | | The type already had registration macros but because the header was added to a non-QML module these didn't come into effect. Add a foreign type to register it properly. Task-number: QTBUG-138589 Pick-to: 6.10 6.9 Change-Id: I5a960cf77b71ff4f2b7ddc03b1583029b86d84bc Reviewed-by: Ulf Hermann <ulf.hermann@qt.io>
* WebEngineQuick: Expose QWebEngineDesktopMediaRequest to QMLOlivier De Cannière2025-08-141-0/+9
| | | | | | | Task-number: QTBUG-138589 Pick-to: 6.10 Change-Id: If8eb6447c3380efa03258f478da68feddccd1988 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
generated by cgit v1.2.3 (git 2.25.1) at 2025-12-16 19:30:40 +0000