Merge branch 'palemoon-bump' into 'master'

Palemoon 28.9.0.2

See merge request bgstack15/stackrpms!146

7 files changed, 96 insertions, 9 deletions

diff --git a/palemoon/debian/changelog b/palemoon/debian/changelog
index 67d8f95..68e0945 100644
--- a/palemoon/debian/changelog
+++ b/palemoon/debian/changelog
@@ -1,3 +1,73 @@
+palemoon (28.9.0.2-1+devuan) obs; urgency=medium
+
+  *  This is a small bugfix update addressing 2 more important issues in 28.9.0.
+    - Fixed an issue with browser migration and initialization code causing various browser run-time problems.
+    - Fixed an issue with cache behavior where some users would have trouble having their windows and tabs restored in "soft refresh" mode (see v28.9.0 release notes).
+    - To solve this, we reverted to the previous (pull from cache) mode for now while we investigate the cause.
+
+ -- Ben Stack <bgstack15@gmail.com>  Thu, 26 Mar 2020 07:50:02 -0400
+
+palemoon (28.9.0.1-1+devuan) UNRELEASED; urgency=medium
+
+  * From releasenotes.shtml: This is a small update to address a breaking issue with user-agent override strings, causing problems on certain websites for a number of our users.
+
+ -- Ben Stack <bgstack15@gmail.com>  Thu, 26 Mar 2020 06:50:02 -0400
+
+palemoon (28.9.0-1+devuan) UNRELEASED; urgency=medium
+
+  * From releasenotes.shtml: This is a major development update.
+  * New features
+    - Implemented asynchronous iterators (`await iterator.next()` and `for await` loops) (ES2018)
+    - Implemented promise-based media playback.
+    - Implemented non-standard legacy CSSStyleSheet rules functions.
+    - Implemented the html5 `<dialog>` element. To switch this on, flip `dom.dialog_element.enabled` to true.
+    - Implemented the optional hiding of pinned tabs in CtrlTab/AllTab panes. (controlled through the preferences `browser.ctrlTab.hidePinnedTabs` and `browser.allTabs.hidePinnedTabs`)
+    - Added 1.25x playback speed to html media elements.
+    - Added a hidden pref (`browser.places.smartBookmarks.max`) to control the sizes of default smart bookmarks categories.
+  * Changes/fixes
+    - Aligned `document.open()` with the overhauled specification.
+    - Aligned the way DOM styles are computed with mainstream browser behavior.
+    - Removed the (unused) DOM promise implementation.
+    - Enabled seeking to next frame in media files.
+    - Enabled dynamic UA updates for emergency use.
+    - Implemented rule processing stub for font-variation-settings.
+    - Increased the maximum XML nesting depth to 2048 levels for extreme corner cases and to conservatively align with other browsers.
+    - Improved the privacy of geolocation lookup calls, with thanks to a generous service donation from ip-api.com
+    - Improved reporting of the operating system in site-specific user-agent overrides.
+    - Improved table drawing performance again after the rewrite for sticky positioning making it slower.
+    - Updated CSP processing to allow custom scheme wildcards to be specified without a port.
+    - Aligned the behavior of outlines with other browsers when dealing with CSS-repositioned elements.
+    - Changed the way hardware acceleration is controlled from the application.
+    - Changed the default monospace font for main languages from Courier New to Consolas.
+    - This provides a more balanced font for fixed-width text that is slightly more condensed and more in line with the naturally compacter variable-width fonts used everywhere else.
+    - Changed the browser's behavior when restoring tabs from previous sessions. To prevent stale pages, it will now by default perform a "soft refresh" of the page instead of drawing it purely from cache without checking if the page needs updating. If you prefer the old behavior, set `browser.sessionstore.cache_behavior` to 0 in about:config.
+    - Updated NSPR to 4.24 and NSS to ~3.48.1-RTM, removing the previous custom patch level with NSS being able to support custom rounds for DBM now.
+    - For extensive release notes with all NSS changes, see [NSS_Releases](https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_Releases)
+    - Implemented an NSS performance optimization for Master Password use with limited effect.
+    - Fixed some potential crashing scenarios with WebGL on Linux.
+    - Completely removed `showModalDialog`.
+    - Disabled some logging in production builds.
+    - Removed various gadgeteering/redundant/dead DOM APIs (casting/presentation, FlyWeb)
+    - Removed support for a number of critical libraries being system-supplied.
+    - Removed "Copy raw data" button from the troubleshooting information page, since it's never used by us in that format, and users mistakenly keep using it instead of copying text.
+    - Removed a bunch of Android and iOS support code.
+    - Fixed an issue with form elements sometimes being incorrectly disabled.
+    - Fixed several crashes.
+    - Fixed an issue with Captive Portal detection sometimes firing even when disabled by the user.
+    - Performed various tree-wide code cleanups.
+    - Backed out a large code cleanup patch for causing subtle issues in website operation (e.g. WordPress). This will have to be revisited later; the reintroduced code is not in use in practice.
+    - Cleaned up the application updater code.
+  * Security-related fixes:
+    - Fixed a potential pointer issue in cubeb. DiD
+    - Disabled allowing remote jar: URIs by default for security reasons. If you need this functionality for your non-standard environment, you can enable it with the preference `network.jar.block-remote-files`, but please consider moving away from this method of providing web-based applications.
+    - Removed a potentially dangerous and otherwise ineffective optimization from the JavaScript engine.
+    - Fixed unwanted behavior where created/focused pop-up windows could potentially cover the DOM fullscreen notification, hiding it from users. (CVE-2020-6810)
+    - Fixed an issue where copying data as a curl request from developer tools would not properly escape parameters. (CVE-2020-6811)
+    - Updated our sctp library code with several upstream fixes.
+    - Unified XUL Platform Mozilla Security Patch Summary: 4 fixed, 3 already mitigated, 1 rejected, 11 not applicable.
+
+ -- Ben Stack <bgstack15@gmail.com>  Thu, 26 Mar 2020 05:50:02 -0400
+
 palemoon (28.8.4-1+devuan) obs; urgency=low
 
   * From releasenotes.shtml: This is a small security and compatibility update.
diff --git a/palemoon/debian/install b/palemoon/debian/install
index 506544e..b26e91b 100644
--- a/palemoon/debian/install
+++ b/palemoon/debian/install
@@ -1,2 +1,2 @@
-application/palemoon/branding/official/palemoon.desktop usr/share/applications
+palemoon/branding/official/palemoon.desktop usr/share/applications
 debian/bgstack15-palemoon-prefs.js /usr/lib/palemoon/browser/defaults/preferences/
diff --git a/palemoon/debian/palemoon_devuan.dsc b/palemoon/debian/palemoon_devuan.dsc
index e301989..5e8d62f 100644
--- a/palemoon/debian/palemoon_devuan.dsc
+++ b/palemoon/debian/palemoon_devuan.dsc
@@ -2,12 +2,15 @@ Format: 3.0 (quilt)
 Source: palemoon
 Binary: palemoon
 Architecture: any
-Version: 28.8.4-1+devuan
+Version: 28.9.0.2-1+devuan
 Maintainer: B Stack <bgstack15@gmail.com>
 Homepage: http://www.palemoon.org/
 Standards-Version: 3.9.6
 Build-Depends: debhelper (>= 12), autoconf2.13, libasound2-dev, libdbus-glib-1-dev (>= 0.60), libgconf2-dev (>= 1.2.1), libgtk2.0-dev (>= 2.14), libssl-dev, libx11-xcb-dev, libxt-dev, lsb-release, mesa-common-dev, pkg-config, python (>= 2.7), unzip, yasm (>= 1.1), zip, zlib1g-dev
+Package-List:
+ palemoon deb web optional arch=any
 Files:
- 00000000000000000000000000000000 1 palemoon_devuan.orig.tar.gz
- 00000000000000000000000000000000 1 palemoon_devuan.debian.tar.xz
+ 00000000000000000000000000000000 1 palemoon_28.9.0.2.orig-platform.tar.gz
+ 00000000000000000000000000000000 1 palemoon_28.9.0.2.orig.tar.gz
+ 00000000000000000000000000000000 1 palemoon_28.9.0.2-1+devuan.debian.tar.xz
 Original-Maintainer: Steven Pusser <stevep@mxlinux.org>
diff --git a/palemoon/debian/patches/bgstack15-palemoon.patch b/palemoon/debian/patches/bgstack15-palemoon.patch
new file mode 100644
index 0000000..f0bd4fa
--- /dev/null
+++ b/palemoon/debian/patches/bgstack15-palemoon.patch
@@ -0,0 +1,11 @@
+diff -Naur 28.4.1-0/application/palemoon/branding/shared/locales/browserconfig.properties 28.4.1-1/application/palemoon/branding/shared/locales/browserconfig.properties
+--- 28.4.1-0/palemoon/branding/shared/locales/browserconfig.properties	2019-03-26 13:33:15.000000000 -0400
++++ 28.4.1-1/palemoon/branding/shared/locales/browserconfig.properties	2019-03-27 10:44:23.578435642 -0400
+@@ -3,5 +3,5 @@
+ # file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ 
+ # Do NOT localize or otherwise change these values
+-browser.startup.homepage=http://start.palemoon.org/
+-browser.startup.homepage_reset=http://start.palemoon.org/
++browser.startup.homepage=http://start.duckduckgo.com/
++browser.startup.homepage_reset=http://start.duckduckgo.com/
diff --git a/palemoon/debian/patches/series b/palemoon/debian/patches/series
index 0ed32c3..25db835 100644
--- a/palemoon/debian/patches/series
+++ b/palemoon/debian/patches/series
@@ -1 +1,2 @@
 small-icons.patch
+bgstack15-palemoon.patch
diff --git a/palemoon/debian/patches/small-icons.patch b/palemoon/debian/patches/small-icons.patch
index fa6017f..03d364a 100644
--- a/palemoon/debian/patches/small-icons.patch
+++ b/palemoon/debian/patches/small-icons.patch
@@ -1,5 +1,5 @@
---- UXP-PM28.3.0_Release.orig/application/palemoon/base/content/browser.xul	2019-01-08 11:42:01.000000000 -0500
-+++ UXP-PM28.3.0_Release/application/palemoon/base/content/browser.xul	2019-02-04 06:57:38.943983285 -0500
+--- UXP-PM28.3.0_Release.orig/palemoon/base/content/browser.xul	2019-01-08 11:42:01.000000000 -0500
++++ UXP-PM28.3.0_Release/palemoon/base/content/browser.xul	2019-02-04 06:57:38.943983285 -0500
 @@ -355,7 +355,7 @@
  
    <toolbox id="navigator-toolbox"
diff --git a/palemoon/debian/watch b/palemoon/debian/watch
index 3f2290d..cc46979 100644
--- a/palemoon/debian/watch
+++ b/palemoon/debian/watch
@@ -1,5 +1,7 @@
 # Reference:
-#    https://wiki.debian.org/debian/watch
 version=4
-#opts=filenamemangle=s/.+\/PMv?(\d\S+)_Release\.tar\.gz/palemoon_$1.orig\.tar\.gz/ \
-  https://github.com/MoonchildProductions/UXP/tags .*/PMv?(\d\S+)_Release\.tar\.gz
+opts=filenamemangle=s/.+\/v?(\d\S+)_Release\.tar\.gz/palemoon_$1.orig\.tar\.gz/ \
+  https://github.com/MoonchildProductions/Pale-Moon/tags .*/v?(\d\S+)_Release\.tar\.gz
+# not working. Uscan does not want to download specific, untagged git commits.
+#opts="component=platform" \
+#  https://github.com/MoonchildProductions/UXP/archive/41e5925b4271c598601fdc77238bbf6497576594.tar.gz