From 4f5042c837f8379b29ec8ec06ee9047da22b821c Mon Sep 17 00:00:00 2001 From: Ian Mitchell Date: Tue, 9 Jun 2026 11:20:56 -0400 Subject: [PATCH] supercollider: re-enable QtWebEngine Qt WebEngine is a major component of the SuperCollider language, especially because it powers the user documentation system, which contains all of the helpfiles for the user's local system that may not be in the online SuperCollider documentation browser (see ). WebEngine has potential security vulnerabilities (see below)---which was why WebEngine was removed in PR #480196---however, the documentation browser in SC is not used for anything other than browsing local documentation, which minimizes the potential harms from WebEngine. Potential security problems with Qt6 WebEngine can be found at the following: * https://doc.qt.io/qt-6//qtwebengine-security.html * (for FreeBSD) https://www.vuxml.org/freebsd/pkg-qt6-webengine.html Security-conscious users may wish to not use QtWebEngine, and so there is an included option to disable it with the `useQtWebEngine` option. --- pkgs/development/interpreters/supercollider/default.nix | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/pkgs/development/interpreters/supercollider/default.nix b/pkgs/development/interpreters/supercollider/default.nix index 078b6782a3d0..6b73cdf7f5f3 100644 --- a/pkgs/development/interpreters/supercollider/default.nix +++ b/pkgs/development/interpreters/supercollider/default.nix @@ -16,6 +16,7 @@ libxt, readline, useSCEL ? false, + useQtWebEngine ? true, emacs, gitUpdater, supercollider-with-plugins, @@ -65,6 +66,7 @@ stdenv.mkDerivation rec { qt6.qtbase qt6.qtwebsockets qt6.qtwayland + qt6.qtwebengine readline ] ++ lib.optional (!stdenv.hostPlatform.isDarwin) alsa-lib; @@ -74,7 +76,7 @@ stdenv.mkDerivation rec { cmakeFlags = [ "-DSC_WII=OFF" "-DSC_EL=${if useSCEL then "ON" else "OFF"}" - (lib.cmakeBool "SC_USE_QTWEBENGINE" false) + (lib.cmakeBool "SC_USE_QTWEBENGINE" useQtWebEngine) ]; passthru = {