#  - pin to sodeps

  pkgname=epiphany

  pkgrel+=.parabola1

  pkgdesc="A GNOME web browser based on the WebKit rendering engine"

  pkgdesc+=", with DuckDuckGo-HTML search"

  arch+=(i686 armv7h)

  license=(GPL)

  depends=(webkit2gtk-4.1 gcr icu libdazzle libhandy libarchive)

  depends=( $( sed 's| icu | |' <<<${depends[@]} ) )

  depends+=(libhogweed.so)

  makedepends=(docbook-xml startup-notification lsb-release gobject-introspection

               yelp-tools git meson)

  checkdepends=(xorg-server-xvfb aspell hspell hunspell nuspell libvoikko)

  groups=(gnome)

  source=("git+https://gitlab.gnome.org/GNOME/epiphany.git#commit=$_commit")

  source+=(libre.patch)

  sha256sums=('SKIP')

  # check() requires networking

  pkgver() {

  }

  build() {

    meson compile -C build 

  }

   			<default l10n="messages">

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:20:39 +0200

  Subject: [PATCH 01/13] Point to local omni.ja files, not remote server

                     >

                       nimbus-desktop-experiments

  diff --git a/browser/components/newtab/data/content/activity-stream.bundle.js b/browser/components/newtab/data/content/activity-stream.bundle.js

  --- a/browser/components/newtab/data/content/activity-stream.bundle.js

  +++ b/browser/components/newtab/data/content/activity-stream.bundle.js

           label = /*#__PURE__*/external_React_default().createElement("span", null, "remote settings (", /*#__PURE__*/external_React_default().createElement("a", {

             className: "providerUrl",

             target: "_blank",

           }, "nimbus-desktop-experiments"), ")");

         }

  diff --git a/services/settings/Utils.jsm b/services/settings/Utils.jsm

  --- a/services/settings/Utils.jsm

  +++ b/services/settings/Utils.jsm

         : AppConstants.REMOTE_SETTINGS_SERVER_URL;

     },

     # 1. List remote settings collections from server.

     echo "INFO: fetch remote settings list from server"

  diff --git a/toolkit/components/search/SearchUtils.jsm b/toolkit/components/search/SearchUtils.jsm

  --- a/toolkit/components/search/SearchUtils.jsm

  +++ b/toolkit/components/search/SearchUtils.jsm

     ENGINES_URLS: {

       "prod-main":

  +.. _viewed live: resource://app/defaults/settings/main/search-config.json

   .. _Normandy: /toolkit/components/normandy/normandy/services.html

  diff --git a/toolkit/modules/AppConstants.jsm b/toolkit/modules/AppConstants.jsm

  --- a/toolkit/modules/AppConstants.jsm

  +++ b/toolkit/modules/AppConstants.jsm

     REMOTE_SETTINGS_SERVER_URL:

   #ifdef MOZ_THUNDERBIRD

   #define PROD_CID "windows-default-browser-agent"

   #define PROD_ID "state"

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:34:08 +0200

  Subject: [PATCH 02/13] Remove polling triggered by push broadcasts

  service.

  ---

   dom/push/PushBroadcastService.jsm    | 13 +++++++++++++

  diff --git a/dom/push/PushBroadcastService.jsm b/dom/push/PushBroadcastService.jsm

  --- a/dom/push/PushBroadcastService.jsm

  +++ b/dom/push/PushBroadcastService.jsm

  @@ -179,6 +179,19 @@ var BroadcastService = class {

      * Call the listeners of the specified broadcasts.

      *

  diff --git a/services/settings/remote-settings.js b/services/settings/remote-settings.js

  --- a/services/settings/remote-settings.js

  +++ b/services/settings/remote-settings.js

         moduleURI: __URI__,

         symbolName: "remoteSettingsBroadcastHandler",

       };

     };

     return remoteSettings;

         `Push notification received (version=${version} phase=${phase})`

       );

     },

   };

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:41:54 +0200

  Subject: [PATCH 03/13] Remove timer that triggers polling for changes

  -# see syntax https://searchfox.org/mozilla-central/rev/cc280c4be94ff8cf64a27cc9b3d6831ffa49fa45/toolkit/components/timermanager/UpdateTimerManager.jsm#155

  -category update-timer RemoteSettingsComponents @mozilla.org/services/settings;1,getService,services-settings-poll-changes,services.settings.poll_interval,86400,259200

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:47:41 +0200

  Subject: [PATCH 04/13] Utils: fetch timestamps of each collection locally

   ; Warning: changing the path to channel-prefs.js can cause bugs (Bug 756325)

  diff --git a/services/settings/Utils.jsm b/services/settings/Utils.jsm

  --- a/services/settings/Utils.jsm

  +++ b/services/settings/Utils.jsm

     async fetchLatestChanges(serverUrl, options = {}) {

       const { expectedTimestamp, lastEtag = "", filters = {} } = options;

       const params = {

         ...filters,

         _expected: expectedTimestamp ?? 0,

             .map(([k, v]) => `${k}=${encodeURIComponent(v)}`)

             .join("&");

       }

       if (response.status >= 500) {

         throw new Error(`Server error ${response.status} ${response.statusText}`);

         }

       }

   ]

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:52:10 +0200

  Subject: [PATCH 05/13] Utils: disable offline checking

  Since only local data is read now, it should always return false for the

  current and any future code that relies on it.

  ---

  diff --git a/services/settings/Utils.jsm b/services/settings/Utils.jsm

  --- a/services/settings/Utils.jsm

  +++ b/services/settings/Utils.jsm

      * @return {bool} Whether network is down or not.

      */

     get isOffline() {

  -    try {

  -      return (

  -        Services.io.offline ||

  -      );

  -    } catch (ex) {

  -      log.warn("Could not determine network status.", ex);

     },

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:56:02 +0200

  Subject: [PATCH 06/13] Refactor hashing logic to a separate function

   2 files changed, 11 insertions(+), 2 deletions(-)

  diff --git a/services/settings/RemoteSettingsWorker.jsm b/services/settings/RemoteSettingsWorker.jsm

  --- a/services/settings/RemoteSettingsWorker.jsm

  +++ b/services/settings/RemoteSettingsWorker.jsm

       // task on the current thread instead of the worker thread.

     }

  +

  +  async getContentHash(bytes) {

  +  }

   }

   // Now, first add a shutdown blocker. If that fails, we must have

  diff --git a/services/settings/SharedUtils.jsm b/services/settings/SharedUtils.jsm

  --- a/services/settings/SharedUtils.jsm

  +++ b/services/settings/SharedUtils.jsm

         return false;

       }

       // Has expected content?

     /**

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 18:05:02 +0200

  Subject: [PATCH 07/13] Client: Fetch and hash records from local dump

   1 file changed, 27 insertions(+), 36 deletions(-)

  diff --git a/services/settings/RemoteSettingsClient.jsm b/services/settings/RemoteSettingsClient.jsm

  --- a/services/settings/RemoteSettingsClient.jsm

  +++ b/services/settings/RemoteSettingsClient.jsm

             // If the data is up-to-date but don't have metadata (records loaded from dump),

             // we fetch them and validate the signature immediately.

  -            const metadata = await this.httpClient().getData({

  -              query: { _expected: expectedTimestamp },

  -            });

               await this.db.importChanges(metadata);

               // We don't bother validating the signature if the dump was just loaded. We do

               // if the dump was loaded at some other point (eg. from .get()).

      * @returns {Promise}

      */

     async _validateCollectionSignature(records, timestamp, metadata) {

  -      signature: { x5u, signature },

  +      json_dump_metadata: { hash, size },

       } = metadata;

       // Merge remote records with local ones and serialize as canonical JSON.

         records,

         timestamp

       );

  -        "p384ecdsa=" + signature,

  -        certChain,

  -        this.signerName,

  +        new TextEncoder().encode(serialized),

  +        size,

  +        hash

         ))

       ) {

         throw new InvalidSignatureError(this.identifier);

      * @param since timestamp of last sync (optional)

      */

     async _fetchChangeset(expectedTimestamp, since) {

  -          _since: since,

  -        },

  -      }

  +      this.bucketName,

  +      this.collectionName

  +    const remoteRecords = data ?? [];

  +

  +      remoteRecords,

  +      expectedTimestamp

  +    const bytes = new TextEncoder().encode(serialized);

  +    const metadata = {

  +      app_build_id: Services.appinfo.appBuildID,

  +      json_dump_metadata: {

  +        size: bytes.length,

  +      },

  +    }

         remoteRecords,

       };

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 18:42:56 +0200

  Subject: [PATCH 08/13] Client: start deferred sync on get() or on()

  correctly synchronized with the dump, so that no metadata checking

  occurs during the session.

  ---

  diff --git a/services/settings/RemoteSettingsClient.jsm b/services/settings/RemoteSettingsClient.jsm

  --- a/services/settings/RemoteSettingsClient.jsm

  +++ b/services/settings/RemoteSettingsClient.jsm

     ClientEnvironmentBase:

       "resource://gre/modules/components-utils/ClientEnvironment.jsm",

     Database: "resource://services-settings/Database.jsm",

  +  DeferredTask: "resource://gre/modules/DeferredTask.jsm",

     IDBHelpers: "resource://services-settings/IDBHelpers.jsm",

     KintoHttpClient: "resource://services-common/kinto-http-client.js",

   });

   const TELEMETRY_COMPONENT = "remotesettings";

  +const DEFERRED_SYNC_DELAY_MILLISECONDS = 1000;

       this._lastCheckTimePref = lastCheckTimePref;

       this._verifier = null;

       this._syncRunning = false;

       // This attribute allows signature verification to be disabled, when running tests

       // or when pulling data from a dev server.

       this.db.identifier = this.identifier;

     }

     get identifier() {

       return `${this.bucketName}/${this.collectionName}`;

     }

         let lastModified = await this.db.getLastModified();

         let hasLocalData = lastModified !== null;

         if (syncIfEmpty && !hasLocalData) {

           // .get() was called before we had the chance to synchronize the local database.

           // We'll try to avoid returning an empty list.

         // No need to verify signature on JSON dumps.

         // If local DB cannot be read, then we don't even try to do anything,

         // we return results early.

  +      return filtered;

       }

       return final;

     }

  +  async _isSynced() {

  +    this._synced ||=

  +    return this._synced;

  +  }

  +

      * Synchronize the local database with the remote server.

      *

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 18:53:51 +0200

  Subject: [PATCH 09/13] Client: deep compare records if timestamps match

   1 file changed, 5 insertions(+), 1 deletion(-)

  diff --git a/services/settings/RemoteSettingsClient.jsm b/services/settings/RemoteSettingsClient.jsm

  --- a/services/settings/RemoteSettingsClient.jsm

  +++ b/services/settings/RemoteSettingsClient.jsm

  +  CanonicalJSON: "resource://gre/modules/CanonicalJSON.jsm",

     ClientEnvironmentBase:

       "resource://gre/modules/components-utils/ClientEnvironment.jsm",

     Database: "resource://services-settings/Database.jsm",

           const old = oldById.get(r.id);

           if (old) {

             oldById.delete(r.id);

  -          if (r.last_modified != old.last_modified) {

  +          if (

  +            r.last_modified != old.last_modified ||

  +          ) {

               syncResult.updated.push({ old, new: r });

             }

           } else {

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 19:01:39 +0200

  Subject: [PATCH 10/13] Client: delete more data on cleanup

   1 file changed, 9 insertions(+), 3 deletions(-)

  diff --git a/services/settings/RemoteSettingsClient.jsm b/services/settings/RemoteSettingsClient.jsm

  --- a/services/settings/RemoteSettingsClient.jsm

  +++ b/services/settings/RemoteSettingsClient.jsm

         allRecords

           .filter(r => !!r.attachment)

           .map(r =>

           )

       );

     }

             // Signature failed, clear local DB because it contains

             // bad data (local + remote changes).

  -          await this.db.clear();

  +          await this._clearAll();

             // Local data was tampered, throw and it will retry from empty DB.

             throw new CorruptedDataError(this.identifier);

               // _importJSONDump() only clears DB if dump is available,

               // therefore do it here!

               if (imported < 0) {

               }

             }

           }

       return syncResult;

     }

      * Fetch information from changeset endpoint.

      *

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 19:07:56 +0200

  Subject: [PATCH 11/13] Client: remove comparison of collection timestamps

   1 file changed, 5 deletions(-)

  diff --git a/services/settings/RemoteSettingsClient.jsm b/services/settings/RemoteSettingsClient.jsm

  --- a/services/settings/RemoteSettingsClient.jsm

  +++ b/services/settings/RemoteSettingsClient.jsm

         updated: [],

         deleted: [],

       };

  -    // If data wasn't changed, return empty sync result.

  -    // This can happen when we update the signature but not the data.

         `${this.identifier} local timestamp: ${localTimestamp}, remote: ${remoteTimestamp}`

       );

  -    if (localTimestamp && remoteTimestamp < localTimestamp) {

       await this.db.importChanges(metadata, remoteTimestamp, remoteRecords, {

         clear: retry,

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 19:15:44 +0200

  Subject: [PATCH 12/13] Attachments: load only from dump and drop cached

  ---

  diff --git a/services/settings/Attachments.jsm b/services/settings/Attachments.jsm

  --- a/services/settings/Attachments.jsm

  +++ b/services/settings/Attachments.jsm

  @@ -151,9 +151,10 @@ class Downloader {

       const {

         attachment: { filename, size, hash },

       } = record;

      */

     async downloadAsBytes(record, options = {}) {

       const {

  -        if (!checkHash) {

  -          return buffer;

  -        }

  -          return buffer;

  -        }

  -        // Content is corrupted.

     /**

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 19:22:20 +0200

  Subject: [PATCH 13/13] Disable CRLite entirely for now

   2 files changed, 2 insertions(+), 1 deletion(-)

  diff --git a/modules/libpref/init/StaticPrefList.yaml b/modules/libpref/init/StaticPrefList.yaml

  --- a/modules/libpref/init/StaticPrefList.yaml

  +++ b/modules/libpref/init/StaticPrefList.yaml

   # 3: Consult CRLite and enforce "Not Revoked" results, but defer to OCSP for "Revoked".

   - name: security.pki.crlite_mode

     type: RelaxedAtomicUint32

   - name: security.tls.version.min

  diff --git a/security/manager/ssl/nsNSSComponent.cpp b/security/manager/ssl/nsNSSComponent.cpp

  --- a/security/manager/ssl/nsNSSComponent.cpp

  +++ b/security/manager/ssl/nsNSSComponent.cpp

     CRLiteMode defaultCRLiteMode = CRLiteMode::Disabled;

     CRLiteMode crliteMode =

         static_cast<CRLiteMode>(StaticPrefs::security_pki_crlite_mode());

       case CRLiteMode::Disabled:

       case CRLiteMode::TelemetryOnly:

  --