If using the sandbox CSP or iframe tag, the web content is supposed to
be not trusted by the main resource origin. Therefore, we'd better
disable the password manager entirely so the untrusted web content
cannot exfiltrate passwords.

https://github.com/google/security-research/security/advisories/GHSA-mhhf-w9xw-pp9x

Part-of: <https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1275>

Fixes: https://gitlab.gnome.org/GNOME/epiphany/-/issues/1811
Part-of: <https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1252>


(cherry picked from commit 020e242469884c3c7088c2c3e4a7726633465fc9)

Fixes: https://gitlab.gnome.org/GNOME/epiphany/-/issues/1930
Part-of: <https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1245>


(cherry picked from commit a2186197fd861b0734c1647cec87ed10ddbb805d)

If we fail to create the file monitor for the user JS file, then we free
the error twice by mistake. Uh-oh. Found by Coverity.

This error occurs when opening Epiphany with no saved history.

Fixes #1914

Part-of: <https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1228>


(cherry picked from commit 8891a9b26a8c9e1b5cf7af118bfdf7b3ba09e442)

The thumbnailPath() function was broken by the removal of
CSSStyleDeclaration.isPropertyImplicit in:

https://bugs.webkit.org/show_bug.cgi?id=217625

But I don't think it was actually needed here? Let's just remove it.

Fixes #1917

Part-of: <https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1228>


(cherry picked from commit 8a4edf645a7d2cdcb2f559342036cb0289de29c9)

This reverts commit 6dd1d930.

Only the main resource should be converted to download, for any other
cases let WebKit decide.

(cherry picked from commit a311325869170b19b5fb6103260374d0f18f60ae)

Part-of: <https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1193>

g_clear_handler_id() is good, and g_cancellable_cancel() is NULL-safe.

Part-of: <https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1193>

Part-of: <https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1193>

(cherry picked from commit 07daea394c3a39a38b90d02e4860c0bb2e80fa5a)