New default web browser on KDE Spin

Kevin Kofler kevin.kofler at chello.at
Sun Aug 2 23:28:09 UTC 2015


Markus Slopianka wrote:
> QtWebKit and KHTML are both unmaintained and insecure.

Blanket claims of "insecure" do not help anyone. Report concrete CVEs that 
affect QtWebKit and/or KHTML and we will backport the fixes. I backported 
CVE fixes even to kdelibs3's KHTML. I will also point out that many current 
Chrome CVEs DO NOT affect QtWebKit, let alone KHTML, because the code bases 
of the forks have diverged a lot, and each fork (WebKit first, now 
Blink/Chromium) has introduced huge amounts of additional code, which of 
course also means more security issues (because bug-free code does not 
exist).

        Kevin Kofler



More information about the kde mailing list