These are chat archives for abranson/rockpool

22nd
Nov 2016
Andrew Branson
@abranson
Nov 22 2016 10:19
2.0.5 early access is out. it's finally got the new silica gecko webview! https://together.jolla.com/question/150237/release-notes-205haapajoki/
ruff
@rufferson
Nov 22 2016 12:12
Ok, will try that in the evening. Did you figure why the build size skyrocketed?
Andrew Branson
@abranson
Nov 22 2016 13:28
No, I haven't had chance to look at it yet I'm afraid
ruff
@rufferson
Nov 22 2016 18:54
shouldn't... sdk be available before early access release? My SFOS SDK says it's fine and actual at current state. Or should I manually update engine packages?
Andrew Branson
@abranson
Nov 22 2016 21:22
i think it's nearly ready
will let you know when it's released
ruff
@rufferson
Nov 22 2016 21:25
ok, thanks
Andrew Branson
@abranson
Nov 22 2016 21:41
i think they're going to merge the mer sdk with the internal sailfish one, which means you'd be able to use the chrooted one and upgrade it with ssu
btw, been trying to get the websockets lib into the main repo
ruff
@rufferson
Nov 22 2016 21:42
and which release will be 5.6 based?
5.6 should have WS included already
Qt 5.6 that is
Andrew Branson
@abranson
Nov 22 2016 21:43
the next one after this. 2.1.0
no it's a plugin. not included by default
no webengine either
ruff
@rufferson
Nov 22 2016 21:45
ok, so we'd still need to pull it from the outside
Andrew Branson
@abranson
Nov 22 2016 21:45
unless i talk them into adding it
i didn't get any resistance anyway
ruff
@rufferson
Nov 22 2016 21:46
it's just about adding it to the repo and then maintaining the rpm. not a big deal but still someone needs to do it %)
although now we're using unmantained build and it's still working fine %)
but if other devs will start linking against it - may become more visible
Andrew Branson
@abranson
Nov 22 2016 21:49
doesn't one of the chat apps use websockets instead of push notifications?
if so then it's a good thing to add as alternative
because fuck websockets
sorry, fuck push notification services
ruff
@rufferson
Nov 22 2016 21:51
dunno, i'm not using anything except telepathy gable
Andrew Branson
@abranson
Nov 22 2016 21:51
;D
apparently qtwebengine is gpl3, and we can't do that
ruff
@rufferson
Nov 22 2016 21:52
can't do what?
qtwebengine is the one which is official qt? chromium based?
can't get speech recognition to work. captured audio is of so poor quality that nothing can recognize that. no idea how it works in official apps. maybe they apply some post-filtering. but it's speex, you cannot filter lossy audio :/
Andrew Branson
@abranson
Nov 22 2016 21:57
yes it's the chromium one. sailfish can't contain gplv3 packages because it would exclude lots of embedded applications
ruff
@rufferson
Nov 22 2016 21:58
ah, yes, webview is actively used in jolla apps, and is even decorated by silica
Andrew Branson
@abranson
Nov 22 2016 22:04
that's why it's being replaced with a gecko one
the email app is much better with it
the account signins too - because the gecko version gets you the mobile versions of the signin pages. they were always a bit fiddly with webkit
ruff
@rufferson
Nov 22 2016 22:05
tbh i like gecko more than wk or its offsprings
exactly because of this. With geko you can be sure it will render the page as per latest specs
while with other embedded solutions stripped down version is always a tradeoff
Andrew Branson
@abranson
Nov 22 2016 22:07
the best advantage should be that you get the possibility to use the user's profile too. so for account signins you'd already be signed in to facebook etc if your browser already was
ruff
@rufferson
Nov 22 2016 22:08
questionable, makes CORS/XSS/CFRG an easy target
also geko cannot support multy instance
so profile is locked. that's why we use separate profile in /cache/rockpool/.mozilla
Andrew Branson
@abranson
Nov 22 2016 22:10
i'm guessing they've solved that problem, as it's in 2.1.9
2.1.0
agree it should be controlled though - some sort of permission needed to be able to read the profile
though any app right now can open ~/.mozilla
ruff
@rufferson
Nov 22 2016 22:11
running gecko as a service and only instantiating chrome (renderer/gui)?
Andrew Branson
@abranson
Nov 22 2016 22:11
no idea
ruff
@rufferson
Nov 22 2016 22:12
to open is not a problem. the problem is to hit some malicious web which will send you a js to force a browser do something in your pre-logged profiles.
with full blown browser you usually have certain control over it, the view is usually of limited control so many things silently slipping through
Andrew Branson
@abranson
Nov 22 2016 22:14
well i guess you'll be able to give it a look over very soon
ruff
@rufferson
Nov 22 2016 22:18
if we take pebble apps - anyone can host a page anywhere with config. The config could be full blown web app with ajax/jquery/younameit (eg misfit). but with no control over hosting we cannot be sure on the other side is trusted source. so - either to restrict functionality or to overload config page with controls. but if we run in isolated sandbox - we don't really care of other side is trying CSRF to hijack pre-logged profiles, as profile will have only other pebble apps