Security warning page doesn’t go away when browsing to a different site

[Olivier Tilloy]

Steps to reproduce:

 1) Open the browser, and browse to https://test-sspev.verisign.com:2443/test-SSPEV-revoked-verisign.html
 2) Verify that you get a security warning page that says that the certificate has been revoked
 3) Focus the address bar, enter any URL (e.g. http://ubuntu.com) and validate

Expected result: the page loads and is displayed

Actual result: the page loads but the security warning page remains on, hiding the contents

[Launchpad Janitor (janitor)]

This bug was fixed in the package webbrowser-app - 0.23+15.04.20141202.1-0ubuntu1

---------------
webbrowser-app (0.23+15.04.20141202.1-0ubuntu1) vivid; urgency=low

  [ Alberto Mardegan ]
  * Swap declaration order of Loaders

  [ Olivier Tilloy ]
  * Cosmetics: get rid of latin names in autopilot tests.
  * Hide the certificate error page when validating a new URL. (LP:
    #1394925)
 -- Ubuntu daily release <email address hidden> Tue, 02 Dec 2014 13:17:05 +0000

[Chris Coulson (chrisccoulson)]

Couldn't CertificateError.isCancelled have been used for this? It's designed for this type of use (well, it will be when bug 1377198 is fixed)

[Olivier Tilloy (osomon)]

So, I can do the following where webview.certificateError is assigned:

  onCertificateError: {
    webview.certificateError = error
    error.onCancelled.connect(function() { webview.certificateError = null })
  }

and this works fine for cancellable errors, but it doesn’t work for e.g. revoked certificates that cannot be overridden. In such a case, I don’t get a cancelled signal (nor can I monitor when the error is destroyed, because QML conceals the QObject::destroyed signal).

[Olivier Tilloy (osomon)]

Answering myself: Chris confirmed that when bug #1377198 is fixed, CertificateError.cancelled will also be emitted for non-overridable errors. So connecting to onCancelled ought to be enough for all cases.

[Launchpad Janitor (janitor)]

This bug was fixed in the package webbrowser-app - 0.23+15.04.20141211.4-0ubuntu1

---------------
webbrowser-app (0.23+15.04.20141211.4-0ubuntu1) vivid; urgency=low

  [ Ubuntu daily release ]
  * New rebuild forced

  [ Olivier Tilloy ]
  * Take captures of live webviews and cache them on disk, to use them
    as tab previews. (LP: #1359293, #1401045)
  * Fix FTBFS on Qt 5.4. (LP: #1398372)
  * Reset the webview’s certificate error when the user cancels it (by
    e.g. committing a new navigation). (LP: #1398905, #1394925)
 -- Ubuntu daily release <email address hidden> Thu, 11 Dec 2014 18:54:12 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package webbrowser-app - 0.23+15.04.20141218~rtm-0ubuntu1

---------------
webbrowser-app (0.23+15.04.20141218~rtm-0ubuntu1) 14.09; urgency=low

  [ Leo Arias ]
  * Refactor the address bar autopilot helpers so they can be used from
    external test cases.
  * Expose on the autopilot helpers the back and forward functionality.

  [ Olivier Tilloy ]
  * Update translation template.
 -- Ubuntu daily release <email address hidden> Thu, 18 Dec 2014 18:40:11 +0000

[Chris Coulson (chrisccoulson)]

Bug 1377198 is also fixed now (in Oxide 1.5) - CertificateError.cancelled is now emitted for non-overridable errors when a new navigation is committed in the webview, and for pending overridable errors if the user taps the stop button. There's tests for both of those cases