ubuntu-webapps-bugs team mailing list archive

[Olivier Tilloy <olivier.tilloy@xxxxxxxxxxxxx>]

Public bug reported:

See http://developer.ubuntu.com/api/qml/sdk-14.10/Ubuntu.Web.WebView
/#getUAString-method for documentation.

This method is being called by the WebView in Component.onCompleted, and
sets the shared context’s default user agent. If the WebView is
instantiated with a url set, the first HTTP request is issued before
getUAString() is called, and thus potentially with the wrong UA string.

This API is racy by design, there’s really no way to fix it.

There are currently 2 apps in the store using this API:

    com.viclog.2048
    com.viclog.flappybird

and 3 more using it with the UbuntuWebView, which is version 0.1 of the
API, based on QtWebKit:

    com.ubuntu.developer.andrewsomething.stackbrowser
    com.ubuntu.developer.daker.x-type
    com.ubuntu.developer.fcole90.feedspot

Seeing those relatively small numbers, I think it’s a good opportunity
to remove the API altogether, after ensuring that the apps are fixed to
not use it. Documentation will need to be updated.

** Affects: webbrowser-app
     Importance: High
     Assignee: Olivier Tilloy (osomon)
         Status: Triaged

** Summary changed:

- Ubuntu.Web’s WebView.getUAString() is racy
+ Ubuntu.Web’s WebView.getUAString() is racy by design

-- 
You received this bug notification because you are a member of Ubuntu
WebApps bug tracking, which is subscribed to webbrowser-app.
https://bugs.launchpad.net/bugs/1399601

Title:
  Ubuntu.Web’s WebView.getUAString() is racy by design

Status in Web Browser App:
  Triaged

Bug description:
  See http://developer.ubuntu.com/api/qml/sdk-14.10/Ubuntu.Web.WebView
  /#getUAString-method for documentation.

  This method is being called by the WebView in Component.onCompleted,
  and sets the shared context’s default user agent. If the WebView is
  instantiated with a url set, the first HTTP request is issued before
  getUAString() is called, and thus potentially with the wrong UA
  string.

  This API is racy by design, there’s really no way to fix it.

  There are currently 2 apps in the store using this API:

      com.viclog.2048
      com.viclog.flappybird

  and 3 more using it with the UbuntuWebView, which is version 0.1 of
  the API, based on QtWebKit:

      com.ubuntu.developer.andrewsomething.stackbrowser
      com.ubuntu.developer.daker.x-type
      com.ubuntu.developer.fcole90.feedspot

  Seeing those relatively small numbers, I think it’s a good opportunity
  to remove the API altogether, after ensuring that the apps are fixed
  to not use it. Documentation will need to be updated.

To manage notifications about this bug go to:
https://bugs.launchpad.net/webbrowser-app/+bug/1399601/+subscriptions