Merge branch 'palemoon-bump' into 'master'

Palemoon 28.9.0.2

See merge request bgstack15/stackrpms!146

10 files changed, 120 insertions, 25 deletions

diff --git a/palemoon/bgstack15-palemoon.patch b/palemoon/bgstack15-palemoon.patch
index 94f9470..f0bd4fa 100644
--- a/palemoon/bgstack15-palemoon.patch
+++ b/palemoon/bgstack15-palemoon.patch
@@ -1,6 +1,6 @@
 diff -Naur 28.4.1-0/application/palemoon/branding/shared/locales/browserconfig.properties 28.4.1-1/application/palemoon/branding/shared/locales/browserconfig.properties
---- 28.4.1-0/application/palemoon/branding/shared/locales/browserconfig.properties	2019-03-26 13:33:15.000000000 -0400
-+++ 28.4.1-1/application/palemoon/branding/shared/locales/browserconfig.properties	2019-03-27 10:44:23.578435642 -0400
+--- 28.4.1-0/palemoon/branding/shared/locales/browserconfig.properties	2019-03-26 13:33:15.000000000 -0400
++++ 28.4.1-1/palemoon/branding/shared/locales/browserconfig.properties	2019-03-27 10:44:23.578435642 -0400
 @@ -3,5 +3,5 @@
  # file, You can obtain one at http://mozilla.org/MPL/2.0/.
  
diff --git a/palemoon/debian/changelog b/palemoon/debian/changelog
index 67d8f95..68e0945 100644
--- a/palemoon/debian/changelog
+++ b/palemoon/debian/changelog
@@ -1,3 +1,73 @@
+palemoon (28.9.0.2-1+devuan) obs; urgency=medium
+
+  *  This is a small bugfix update addressing 2 more important issues in 28.9.0.
+    - Fixed an issue with browser migration and initialization code causing various browser run-time problems.
+    - Fixed an issue with cache behavior where some users would have trouble having their windows and tabs restored in "soft refresh" mode (see v28.9.0 release notes).
+    - To solve this, we reverted to the previous (pull from cache) mode for now while we investigate the cause.
+
+ -- Ben Stack <bgstack15@gmail.com>  Thu, 26 Mar 2020 07:50:02 -0400
+
+palemoon (28.9.0.1-1+devuan) UNRELEASED; urgency=medium
+
+  * From releasenotes.shtml: This is a small update to address a breaking issue with user-agent override strings, causing problems on certain websites for a number of our users.
+
+ -- Ben Stack <bgstack15@gmail.com>  Thu, 26 Mar 2020 06:50:02 -0400
+
+palemoon (28.9.0-1+devuan) UNRELEASED; urgency=medium
+
+  * From releasenotes.shtml: This is a major development update.
+  * New features
+    - Implemented asynchronous iterators (`await iterator.next()` and `for await` loops) (ES2018)
+    - Implemented promise-based media playback.
+    - Implemented non-standard legacy CSSStyleSheet rules functions.
+    - Implemented the html5 `<dialog>` element. To switch this on, flip `dom.dialog_element.enabled` to true.
+    - Implemented the optional hiding of pinned tabs in CtrlTab/AllTab panes. (controlled through the preferences `browser.ctrlTab.hidePinnedTabs` and `browser.allTabs.hidePinnedTabs`)
+    - Added 1.25x playback speed to html media elements.
+    - Added a hidden pref (`browser.places.smartBookmarks.max`) to control the sizes of default smart bookmarks categories.
+  * Changes/fixes
+    - Aligned `document.open()` with the overhauled specification.
+    - Aligned the way DOM styles are computed with mainstream browser behavior.
+    - Removed the (unused) DOM promise implementation.
+    - Enabled seeking to next frame in media files.
+    - Enabled dynamic UA updates for emergency use.
+    - Implemented rule processing stub for font-variation-settings.
+    - Increased the maximum XML nesting depth to 2048 levels for extreme corner cases and to conservatively align with other browsers.
+    - Improved the privacy of geolocation lookup calls, with thanks to a generous service donation from ip-api.com
+    - Improved reporting of the operating system in site-specific user-agent overrides.
+    - Improved table drawing performance again after the rewrite for sticky positioning making it slower.
+    - Updated CSP processing to allow custom scheme wildcards to be specified without a port.
+    - Aligned the behavior of outlines with other browsers when dealing with CSS-repositioned elements.
+    - Changed the way hardware acceleration is controlled from the application.
+    - Changed the default monospace font for main languages from Courier New to Consolas.
+    - This provides a more balanced font for fixed-width text that is slightly more condensed and more in line with the naturally compacter variable-width fonts used everywhere else.
+    - Changed the browser's behavior when restoring tabs from previous sessions. To prevent stale pages, it will now by default perform a "soft refresh" of the page instead of drawing it purely from cache without checking if the page needs updating. If you prefer the old behavior, set `browser.sessionstore.cache_behavior` to 0 in about:config.
+    - Updated NSPR to 4.24 and NSS to ~3.48.1-RTM, removing the previous custom patch level with NSS being able to support custom rounds for DBM now.
+    - For extensive release notes with all NSS changes, see [NSS_Releases](https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_Releases)
+    - Implemented an NSS performance optimization for Master Password use with limited effect.
+    - Fixed some potential crashing scenarios with WebGL on Linux.
+    - Completely removed `showModalDialog`.
+    - Disabled some logging in production builds.
+    - Removed various gadgeteering/redundant/dead DOM APIs (casting/presentation, FlyWeb)
+    - Removed support for a number of critical libraries being system-supplied.
+    - Removed "Copy raw data" button from the troubleshooting information page, since it's never used by us in that format, and users mistakenly keep using it instead of copying text.
+    - Removed a bunch of Android and iOS support code.
+    - Fixed an issue with form elements sometimes being incorrectly disabled.
+    - Fixed several crashes.
+    - Fixed an issue with Captive Portal detection sometimes firing even when disabled by the user.
+    - Performed various tree-wide code cleanups.
+    - Backed out a large code cleanup patch for causing subtle issues in website operation (e.g. WordPress). This will have to be revisited later; the reintroduced code is not in use in practice.
+    - Cleaned up the application updater code.
+  * Security-related fixes:
+    - Fixed a potential pointer issue in cubeb. DiD
+    - Disabled allowing remote jar: URIs by default for security reasons. If you need this functionality for your non-standard environment, you can enable it with the preference `network.jar.block-remote-files`, but please consider moving away from this method of providing web-based applications.
+    - Removed a potentially dangerous and otherwise ineffective optimization from the JavaScript engine.
+    - Fixed unwanted behavior where created/focused pop-up windows could potentially cover the DOM fullscreen notification, hiding it from users. (CVE-2020-6810)
+    - Fixed an issue where copying data as a curl request from developer tools would not properly escape parameters. (CVE-2020-6811)
+    - Updated our sctp library code with several upstream fixes.
+    - Unified XUL Platform Mozilla Security Patch Summary: 4 fixed, 3 already mitigated, 1 rejected, 11 not applicable.
+
+ -- Ben Stack <bgstack15@gmail.com>  Thu, 26 Mar 2020 05:50:02 -0400
+
 palemoon (28.8.4-1+devuan) obs; urgency=low
 
   * From releasenotes.shtml: This is a small security and compatibility update.
diff --git a/palemoon/debian/install b/palemoon/debian/install
index 506544e..b26e91b 100644
--- a/palemoon/debian/install
+++ b/palemoon/debian/install
@@ -1,2 +1,2 @@
-application/palemoon/branding/official/palemoon.desktop usr/share/applications
+palemoon/branding/official/palemoon.desktop usr/share/applications
 debian/bgstack15-palemoon-prefs.js /usr/lib/palemoon/browser/defaults/preferences/
diff --git a/palemoon/debian/palemoon_devuan.dsc b/palemoon/debian/palemoon_devuan.dsc
index e301989..5e8d62f 100644
--- a/palemoon/debian/palemoon_devuan.dsc
+++ b/palemoon/debian/palemoon_devuan.dsc
@@ -2,12 +2,15 @@ Format: 3.0 (quilt)
 Source: palemoon
 Binary: palemoon
 Architecture: any
-Version: 28.8.4-1+devuan
+Version: 28.9.0.2-1+devuan
 Maintainer: B Stack <bgstack15@gmail.com>
 Homepage: http://www.palemoon.org/
 Standards-Version: 3.9.6
 Build-Depends: debhelper (>= 12), autoconf2.13, libasound2-dev, libdbus-glib-1-dev (>= 0.60), libgconf2-dev (>= 1.2.1), libgtk2.0-dev (>= 2.14), libssl-dev, libx11-xcb-dev, libxt-dev, lsb-release, mesa-common-dev, pkg-config, python (>= 2.7), unzip, yasm (>= 1.1), zip, zlib1g-dev
+Package-List:
+ palemoon deb web optional arch=any
 Files:
- 00000000000000000000000000000000 1 palemoon_devuan.orig.tar.gz
- 00000000000000000000000000000000 1 palemoon_devuan.debian.tar.xz
+ 00000000000000000000000000000000 1 palemoon_28.9.0.2.orig-platform.tar.gz
+ 00000000000000000000000000000000 1 palemoon_28.9.0.2.orig.tar.gz
+ 00000000000000000000000000000000 1 palemoon_28.9.0.2-1+devuan.debian.tar.xz
 Original-Maintainer: Steven Pusser <stevep@mxlinux.org>
diff --git a/palemoon/debian/patches/bgstack15-palemoon.patch b/palemoon/debian/patches/bgstack15-palemoon.patch
new file mode 100644
index 0000000..f0bd4fa
--- /dev/null
+++ b/palemoon/debian/patches/bgstack15-palemoon.patch
@@ -0,0 +1,11 @@
+diff -Naur 28.4.1-0/application/palemoon/branding/shared/locales/browserconfig.properties 28.4.1-1/application/palemoon/branding/shared/locales/browserconfig.properties
+--- 28.4.1-0/palemoon/branding/shared/locales/browserconfig.properties	2019-03-26 13:33:15.000000000 -0400
++++ 28.4.1-1/palemoon/branding/shared/locales/browserconfig.properties	2019-03-27 10:44:23.578435642 -0400
+@@ -3,5 +3,5 @@
+ # file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ 
+ # Do NOT localize or otherwise change these values
+-browser.startup.homepage=http://start.palemoon.org/
+-browser.startup.homepage_reset=http://start.palemoon.org/
++browser.startup.homepage=http://start.duckduckgo.com/
++browser.startup.homepage_reset=http://start.duckduckgo.com/
diff --git a/palemoon/debian/patches/series b/palemoon/debian/patches/series
index 0ed32c3..25db835 100644
--- a/palemoon/debian/patches/series
+++ b/palemoon/debian/patches/series
@@ -1 +1,2 @@
 small-icons.patch
+bgstack15-palemoon.patch
diff --git a/palemoon/debian/patches/small-icons.patch b/palemoon/debian/patches/small-icons.patch
index fa6017f..03d364a 100644
--- a/palemoon/debian/patches/small-icons.patch
+++ b/palemoon/debian/patches/small-icons.patch
@@ -1,5 +1,5 @@
---- UXP-PM28.3.0_Release.orig/application/palemoon/base/content/browser.xul	2019-01-08 11:42:01.000000000 -0500
-+++ UXP-PM28.3.0_Release/application/palemoon/base/content/browser.xul	2019-02-04 06:57:38.943983285 -0500
+--- UXP-PM28.3.0_Release.orig/palemoon/base/content/browser.xul	2019-01-08 11:42:01.000000000 -0500
++++ UXP-PM28.3.0_Release/palemoon/base/content/browser.xul	2019-02-04 06:57:38.943983285 -0500
 @@ -355,7 +355,7 @@
  
    <toolbox id="navigator-toolbox"
diff --git a/palemoon/debian/watch b/palemoon/debian/watch
index 3f2290d..cc46979 100644
--- a/palemoon/debian/watch
+++ b/palemoon/debian/watch
@@ -1,5 +1,7 @@
 # Reference:
-#    https://wiki.debian.org/debian/watch
 version=4
-#opts=filenamemangle=s/.+\/PMv?(\d\S+)_Release\.tar\.gz/palemoon_$1.orig\.tar\.gz/ \
-  https://github.com/MoonchildProductions/UXP/tags .*/PMv?(\d\S+)_Release\.tar\.gz
+opts=filenamemangle=s/.+\/v?(\d\S+)_Release\.tar\.gz/palemoon_$1.orig\.tar\.gz/ \
+  https://github.com/MoonchildProductions/Pale-Moon/tags .*/v?(\d\S+)_Release\.tar\.gz
+# not working. Uscan does not want to download specific, untagged git commits.
+#opts="component=platform" \
+#  https://github.com/MoonchildProductions/UXP/archive/41e5925b4271c598601fdc77238bbf6497576594.tar.gz
diff --git a/palemoon/palemoon.spec b/palemoon/palemoon.spec
index 6a81708..cfe3639 100644
--- a/palemoon/palemoon.spec
+++ b/palemoon/palemoon.spec
@@ -1,8 +1,11 @@
-%global tarballdir UXP-PM%{version}_Release
+%global tarballdir Pale-Moon-%{version}_Release
 %global dummy_package   0
 %global appname palemoon
 %global prettyname Pale Moon Web Browser
 %global stackrpms_custom 1
+# derive from inside the full source tree:
+# git submodule | awk -v "name=platform" '$2 == name {gsub("-","",$1); print $1}'
+%global submodule_platform_commit 41e5925b4271c598601fdc77238bbf6497576594
 
 # additional repos to get python27 and devtoolset-7
 # for el6 and el7: Software Collection;, for x86_64 only
@@ -40,18 +43,19 @@ Summary:	Pale Moon web browser with stackrpms prefs
 Name:    palemoon
 Summary:	Pale Moon web browser
 %endif
-Version:	28.8.4
+Version:	28.9.0.2
 Release:	1
 
 Group:	Networking/Web
 License:	MPLv2.0
 URL:		http://linux.palemoon.org/
-Source0:	https://github.com/MoonchildProductions/UXP/archive/PM%{version}_Release.tar.gz
-Source1: palemoon-mozconfig
-Source2: palemoon.desktop
-Source3: palemoon-mimeinfo.xml
+Source0:	https://github.com/MoonchildProductions/Pale-Moon/archive/%{version}_Release.tar.gz
+Source1:	https://github.com/MoonchildProductions/UXP/archive/%{submodule_platform_commit}.tar.gz
+Source2: palemoon-mozconfig
+Source3: palemoon.desktop
+Source4: palemoon-mimeinfo.xml
 %if 0%{stackrpms_custom}
-Source4: bgstack15-palemoon-prefs.js
+Source5: bgstack15-palemoon-prefs.js
 Patch0: small-icons.patch
 Patch1: bgstack15-palemoon.patch
 %endif
@@ -108,7 +112,8 @@ and themes to make the browser truly your own.
 
 %prep
 %setup -q -n %{tarballdir}
-%{__cp} %{SOURCE1} ./.mozconfig
+tar -C platform --strip-components=1 -zxf %{SOURCE1} # git submodule
+%{__cp} %{SOURCE2} ./.mozconfig
 %if 0%{?fedora} >= 30
 sed -i -r -e '/enable-optimize/s/"\s*$/ -Wno-format-overflow"/' ./.mozconfig
 %endif
@@ -166,7 +171,7 @@ EOF
 
 # desktop files
 %{__mkdir_p} %{buildroot}%{_datadir}/applications
-desktop-file-install --dir %{buildroot}%{_datadir}/applications %{SOURCE2}
+desktop-file-install --dir %{buildroot}%{_datadir}/applications %{SOURCE3}
 
 %{__sed} -i -r -e "s/@NAME@/%{prettyname}/;" \
    -e "s/@EXEC@/%{appname}/;" \
@@ -180,7 +185,7 @@ desktop-file-install --dir %{buildroot}%{_datadir}/applications %{SOURCE2}
 # none
 
 # mimetypes
-%{__install} -Dm0644 %{SOURCE3} \
+%{__install} -Dm0644 %{SOURCE4} \
    %{buildroot}%{_datadir}/mime/packages/%{name}.xml
 
 # icons
@@ -188,7 +193,7 @@ desktop-file-install --dir %{buildroot}%{_datadir}/applications %{SOURCE2}
 for s in 16 22 24 32 48 256 ;
 do
    %{__mkdir_p} %{buildroot}%{_datadir}/icons/hicolor/${s}x${s}/apps
-   %{__cp} -p application/%{appname}/branding/official/default${s}.png \
+   %{__cp} -p %{appname}/branding/official/default${s}.png \
    %{buildroot}%{_datadir}/icons/hicolor/${s}x${s}/apps/%{appname}.png
 done
 
@@ -245,7 +250,7 @@ filelist() {
 
 %if 0%{stackrpms_custom}
 %{__install} -d %{buildroot}%{_libdir}/%{name}/browser/defaults/preferences/
-%{__install} -Dm0644 %{SOURCE4} \
+%{__install} -Dm0644 %{SOURCE5} \
    %{buildroot}%{_libdir}/%{name}/browser/defaults/preferences/
 %endif
 
@@ -279,6 +284,9 @@ update-mime-database -n ${_datadir}/mime 1>/dev/null 2>&1 & :
 %doc AUTHORS LICENSE
 
 %changelog
+* Thu Mar 26 2020 B Stack <bgstack15@gmail.com> - 28.9.0.2-1
+- update version
+
 * Mon Mar 02 2020 B Stack <bgstack15@gmail.com> - 28.8.4-1
 - update version
 
diff --git a/palemoon/small-icons.patch b/palemoon/small-icons.patch
index fa6017f..03d364a 100644
--- a/palemoon/small-icons.patch
+++ b/palemoon/small-icons.patch
@@ -1,5 +1,5 @@
---- UXP-PM28.3.0_Release.orig/application/palemoon/base/content/browser.xul	2019-01-08 11:42:01.000000000 -0500
-+++ UXP-PM28.3.0_Release/application/palemoon/base/content/browser.xul	2019-02-04 06:57:38.943983285 -0500
+--- UXP-PM28.3.0_Release.orig/palemoon/base/content/browser.xul	2019-01-08 11:42:01.000000000 -0500
++++ UXP-PM28.3.0_Release/palemoon/base/content/browser.xul	2019-02-04 06:57:38.943983285 -0500
 @@ -355,7 +355,7 @@
  
    <toolbox id="navigator-toolbox"