NotAlexNoyleandClaude Fable 5.1
62af6e82c7
The owner's choice of 2026-11-02 after T-551's check found the tag: the update now, patch 0060 (the roots, byte-identical upstream) dropped, special attention to the certificate and HTTPS changes. - update-engine.sh RB_20261027 / --finish: the 72 patches on the tag (0060 fell away as already applied), jihad/uxp-RB_20261027 at 52ad9ab66e in third_party/uxp, the queue rewritten and renumbered from 0060, the pins (engine-version.env, the OE recipe, .gitmodules, the UA and the three start pages: UXP/6b18be9), JIHAD_APP_BUILD_ID 20261103000000; patch-queue.sh --check, check-engine-pins.sh and check-engine-api.py (baseline rewritten, unchanged) agree. - docs/ENGINE-SOURCE.md: the base, the dropped 0060, the renumbering, and the range's 12 commits each with its disposition — the two NSS certificate commits (emSign removed after the eMudhra compromise; certdata to Sept 2026) were on the device since the roots of 2026-10-25 and are the base's now; no PSM, TLS protocol, HSTS or certificate-UI change in the range; the memory-safety fixes (the JS OOB array copy, the jar: flag, feTile, the layout frame table, the mutation observer's strong ref, SQLite 3.54.1) taken with the base. - audit-roots.py against the fetched release certdata and the CCADB report: identical set and trust, none removed, RESULT OK (docs/rounds/certs-2026-11-03). - Desktop: the full build clean; 14 of 18 tests pass, the four left are the desktop GTK path's known read-back limit. ARM: libxul, the daemon, the bundle, the three packages; full pushes to all three variants; default-check x3 faults 0; the daemon's start line 28 of 29 optional exports as before. The areas the commits touch, on the device (tools/device/engine-checks.sh, new): about:settings, about:personas and about:addons through jar: under the flag change, cookies through the new SQLite, an SVG filter page with feTile and its overflow case (render/goanna/test/jihad-svg-filter.html, new), a long press's selection; faults 0. The certificate kit's checks (tools/device/cert-checks.sh): the TLS 1.0 refusal, the clean loads, expired / wrong.host / self-signed / untrusted-root with the SSL confirm's right flags, OCSP revocation enforced on grc.com, ssl.com and DigiCert's demos, revoked.badssl.com's CRL-only case invisible as before: nothing changed with the base. Records: docs/rounds/engine-rb27-2026-11-03/notes.txt. - tools/device/cert-checks.sh and t502/enyo-restore-job.sh (new): the certificate kit's device checks under a hand-started daemon, and the Enyo job put back after any spike round. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Jihad Browser — Enyo 1.0 UI shell
Modified by the Jihad Browser project (2026), per Apache-2.0 section 4(b): this tree differs from HP's isis-browser original; the changes are this repository's git history.
This is the Jihad Browser fork of the isis-browser Enyo 1.0 app (Apache-2.0), rebranded and rendering through the UXP/Goanna engine instead of QtWebKit.
It uses the enyo WebView control to display web content. Jihad is self-contained
and coexists with the stock browser: source/JihadEngineOverride.js (first entry
in depends.js) swaps THIS app's WebView plugin type to application/x-jihad-browser,
so the card loads BrowserAdapterJihad.so → the Jihad Goanna daemon
(/tmp/yapserver.jihad-browser). Every other app's stock application/x-palm-browser
WebView is untouched. See ../packaging/README.md and ../docs/DEVICE-BUILD.md.
Iterating on this UI: ../build/webos-oe/push-card-js.sh enyo source/Browser.js …
pushes card files to a connected device and only reports success once a per-push stamp
reaches the device log — the WebAppMgr JS cache will otherwise keep running the previous
build with the new file already on disk. See ../build/webos-oe/README.md.
<select> dropdowns need no code here. The stock enyo.WebView wrapper handles the
whole card side itself (showSelect → createSelectPopup → PopupList, answering with
selectPopupMenuItem) and never re-publishes the event, so an onOpenSelect handler in
source/Browser.js is unreachable — one was written, proved dead and removed. Do not
re-add one, and do not patch BasicWebView.showPopupMenu: an earlier patch shadowed the
framework method and killed the popup outright. What the feature actually needs is the
daemon emitting the isis option-list shape, which it does.
The original isis README follows.
isis-browser
isis-browser is the enyo browser app for webOS.
It uses the enyo WebView control to display web content which in turn uses BrowserAdapter and BrowserServer to talk to webOS webkit.
Copyright and License Information
All content, including all source code files and documentation files in this repository are: Copyright (c) 2012 Hewlett-Packard Development Company, L.P.
All content, including all source code files and documentation files in this repository are: Licensed under the Apache License, Version 2.0 (the "License"); you may not use this content except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.