Bug 399831 - Hard dependency on KGAPI should be optional
Summary: Hard dependency on KGAPI should be optional
Status: RESOLVED INTENTIONAL
Alias: None
Product: kmailtransport
Classification: Applications
Component: general (show other bugs)
Version: unspecified
Platform: Gentoo Packages Linux
: NOR normal
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-10-15 11:49 UTC by Luke-Jr
Modified: 2020-02-06 20:21 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Luke-Jr 2018-10-15 11:49:07 UTC
kmailtransport 18.08.2 seems to have added a hard dependency on KGAPI at some point. KGAPI requires QtWebEngine, which is not available on my platform (POWER9), and is in any case a security hazard. It appears KGAPI is only for Google services I wouldn't want to use anyway.

Shouldn't it be optional?
Comment 1 Christoph Feck 2018-11-08 21:11:21 UTC
The messageviewer in KMail requires QtWebEngine anyway. Do you have a usecase for using kmailtransport outside of KDEPIM applications?
Comment 2 Luke-Jr 2018-11-08 21:16:47 UTC
My end goal is to use KDEPIM without QtWebEngine.
Comment 3 Christoph Feck 2018-11-08 23:11:55 UTC
Your end goal probably would be QtWebEngine support for your platform.

I very much doubt KDEPIM will revert the work of the recent years to go back to the (long unmaintained) QtWebKit, but I let KDEPIM developers decide what to do with this ticket.
Comment 4 Luke-Jr 2018-11-09 00:32:01 UTC
Even when QtWebEngine is ported, I don't intend to install/use it. Javascript is a security hazard. Same goes for QtWebKit.
Comment 5 Laurent Montel 2018-11-09 06:09:13 UTC
(In reply to Luke-Jr from comment #2)
> My end goal is to use KDEPIM without QtWebEngine.

it will never arrive.
Sorry.

And "kmailtransport 18.08.2 seems to have added a hard dependency on KGAPI " it has a phabricator review and Dan and me told that we don't want it in source.

After that you can patch for your distro but for sure we will not do it in official source.
Regards.
Comment 6 Luke-Jr 2020-02-06 17:02:54 UTC
Upstream Chromium seems to have major security issues every month. QtWebEngine gets updated far less frequently, and often goes months or longer vulnerable to easily exploited issues.

Won't you reconsider, please?
Comment 7 Christophe Marin 2020-02-06 20:21:21 UTC
(In reply to Luke-Jr from comment #6)
>
> Won't you reconsider, please?

No, unless Qt supports another web engine, this won't change.