Many hyperlinks are disabled.
Use anonymous login
to enable hyperlinks.
46 check-ins using file src/rss.c version 6e7d3cd18b
|
2023-01-09
| ||
| 05:16 | add new entry to related work links and polish markup Add 'fsl', a tcl wrapper, to inspired projects; prompted by John Rouillard on the [forum:2f5b79e695|forum]. While here, remove redundant markup and articles. ... (check-in: b4b8dc32f2 user: mark tags: trunk) | |
|
2023-01-07
| ||
| 20:58 | Updates to the change log to discuss recent enhancements. ... (check-in: 7173a1b1f4 user: drh tags: trunk) | |
| 20:37 | Submenu buttons linking all of the logging pages. ... (check-in: aae2b775f9 user: drh tags: trunk) | |
| 20:18 | Make admin_log entries for password changes. ... (check-in: c9c7e8c1d8 user: drh tags: trunk) | |
| 17:06 | Enhance the new /resetpw page so that it honors the redirect-to-https setting. ... (check-in: 3b1e8a0e5c user: drh tags: trunk) | |
| 15:36 | Add the ability to enable users to request an email message that contains a special secure hyperlink that they can follow to reset their password. ... (check-in: 07bfe3fee3 user: drh tags: trunk) | |
| 15:35 | Go to the login page after a successful self-service password reset. ... (Closed-Leaf check-in: 837f275868 user: drh tags: self-service-password-reset) | |
| 15:18 | Improved comments. Extra defensive code. ... (check-in: d860e2b5f6 user: drh tags: self-service-password-reset) | |
| 14:25 | Initial complete implementation of self-password-reset. Just need refinement and a security audit before merging to trunk. ... (check-in: 41bb73e9ba user: drh tags: self-service-password-reset) | |
| 11:58 | Add a non-functioning place-holder button to request a password reset to the /register page. ... (check-in: 5c62a2c3a7 user: drh tags: self-service-password-reset) | |
| 00:03 | Add the /resetpw web page. The name argument must contain a hash that proves knowledge of the old password and that limits the valid lifetime of the argument. ... (check-in: ac86dfa085 user: drh tags: self-service-password-reset) | |
|
2023-01-06
| ||
| 21:33 | Do not try to resolve the IP from the hostname when syncing using ssh:// protocol. Ssh may use the provided name as an alias defined in ~/.ssh/config which may not be resolvable or even resolve to an unrelated ip. This change can potentially avoid long timeout during name resolution failure. Equivalent to [52f08008e2790a81]. ... (check-in: e5c5622d4b user: mgagnon tags: no_ssh_sync_ip_resolve) | |
| 14:27 | Oops, somehow one dash in `--file` got lost in 92d3fdba73a44c4c. ... (check-in: 0bf2eaaf65 user: km tags: trunk) | |
| 14:25 | Minor adjustments in description of the `--file` option for `whatis`. ... (check-in: 92d3fdba73 user: km tags: trunk) | |
| 14:03 | Allow writes to the accesslog table to record a login attempt even if the request is not from the same origin. This is needed in case a query request url it typed in manually but there is a cookie with login credentials that the browser adds automatically. ... (check-in: e31c2c01e1 user: drh tags: trunk) | |
| 13:10 | Add the 'dont-commit' setting as a safety against accidental commits, per request in [forum:7643435a90|forum post 291f9af918]. ... (check-in: 884436ce74 user: danield tags: trunk) | |
| 13:04 | Fix a bug in the 'commit' command that made it ignore the 'forbid-delta-manifests' setting. ... (check-in: ead01b6f27 user: danield tags: trunk) | |
| 12:59 | Fix the /chat-send page so that it works even with the recent same-origin security enhancements. ... (check-in: 4ba37b1c14 user: drh tags: trunk) | |
| 08:34 | update related work page: Add Inskinerator as per [forum:634b880146abf68f|forum post] from wyoung@, the Makeheaders tool, and the new Sapling version control system. ... (check-in: be6d71dd64 user: mark tags: trunk) | |
|
2023-01-05
| ||
| 19:49 | Add support for "fossil remote" and "fossil sync --all" to the "fossil all" command. ... (check-in: 693b950b1e user: drh tags: trunk) | |
| 17:21 | Add the "-f|--file" flag to the "whatis" command which consist to search for any other files in the repo with the exact same content as the given file. ... (check-in: a821cbf522 user: mgagnon tags: trunk) | |
|
2023-01-03
| ||
| 20:13 | Added named anchors to the "Image Format vs Fossil Repo Size" doc so I can refer to one in particular. ... (check-in: 7de2410f74 user: wyoung tags: trunk) | |
|
2023-01-02
| ||
| 16:12 | When applying a patch, if the file rename fails, make that just a warning not a fatal error, as the warning might be due to file renames on a prior merge. Fix for ticket [21037bfc1296dabc]. ... (check-in: f013384605 user: drh tags: trunk) | |
| 15:52 | Initialize the output blob in the test-delta-apply command. ... (check-in: dd9b316179 user: drh tags: trunk) | |
| 13:00 | Show the value of g.zLocalRoot on the /test_env page. ... (check-in: 3df5d40c2f user: drh tags: trunk) | |
|
2022-12-31
| ||
| 18:51 | Fix another case where PROTECT_READONLY needs to be relaxed even though the request not from the same origin. ... (check-in: 03e21b9cd5 user: drh tags: trunk) | |
| 12:21 | Fix stray character in the change log. ... (check-in: fbcd9a77b7 user: drh tags: trunk) | |
| 12:16 | Fix more cases where updates to the SUBSCRIBER table should be allowed to occur even if not a request from the same origin. ... (check-in: f33976f7cc user: drh tags: trunk) | |
|
2022-12-30
| ||
| 22:18 | Correct mis-pluralization of 'new ticketss' in the timeline, per report in [forum:e711cb860a|forum post e711cb860a]. ... (check-in: 7c2c445796 user: stephan tags: trunk) | |
| 21:12 | Improved comment on the db_obscure() routine. No functional code changes. ... (check-in: aa1a0b31e2 user: drh tags: trunk) | |
| 20:54 | Security enhancement: Do not store the passwords for remote URLs directly, but instead store the sha1_shared_secret() encoding of those passwords. It is the SHA1 encoding that gets transmitted to the server anyhow, so we might as well just store that. The SHA1 encoding cannot be used to log in. The password is still protected using obscure() even though it is now a SHA1 hash. ... (check-in: 41ba6ea7db user: drh tags: trunk) | |
| 16:32 | Show the parent-project-* CONFIG entries (if they exist) with the "fossil remote config-data" command. When parsing a URL, if the URL comes from the CONFIG table, remember the CONFIG table entry that supplied the password. ... (check-in: 6d0083adce user: drh tags: trunk) | |
| 12:26 | Fix minor typos in the diff source code. ... (check-in: 4e169542ae user: drh tags: trunk) | |
| 11:53 | If there is a need to do lazy updates of the full text index during a request that is not from the same origin, then allow database writes for the duration of that update. Also, allow changes to USER and CONFIG tables when explicitly authorized by db_unprotect() even if the request that prompted the change is not from the same origin. ... (check-in: 8e85d6ca22 user: drh tags: trunk) | |
|
2022-12-29
| ||
| 21:09 | All writes to the subscriber table to update the last contact time even if the request is not from the same origin. ... (check-in: db16262817 user: drh tags: trunk) | |
| 20:09 | Improved comments on the SQL protection subsystem. ... (check-in: 0aa3483fa8 user: drh tags: trunk) | |
| 19:49 | Only apply the PROTECT_READONLY restriction to the "repository", "configdb", and "localdb" database files. ... (check-in: b4e00621e3 user: drh tags: trunk) | |
| 19:39 | Fix the new read-only-repo security mechanism so that it enables write access when necessary. ... (check-in: f8363db81b user: drh tags: trunk) | |
| 18:56 | Add messages to the error log if the authorizer blocks an SQL statement for security reasons. This change requires a bug fix in SQLite and so it also includes the latest trunk version of SQLite. ... (check-in: 3d8bb63aab user: drh tags: trunk) | |
| 17:00 | Make the repository database read-only if an HTTP request is not from the same origin. This is not required for security. It is just an extra layer of defense. ... (check-in: 7c71f00ac8 user: drh tags: trunk) | |
|
2022-12-25
| ||
| 16:17 | A minor fix to the previous check-in. ... (check-in: abfec4dd5c user: george tags: trunk) | |
| 14:24 | Use URI extensions rather than name= query parameters on key ticket hyperlinks. ... (check-in: 5f22b960b3 user: drh tags: trunk) | |
|
2022-12-21
| ||
| 12:07 | Change spelling for check-in, check-out, and related words. ... (check-in: bc36fdcf3a user: danield tags: trunk) | |
| 11:52 | Merge in help consistency improvements. ... (Closed-Leaf check-in: 526b0a54c4 user: danield tags: check-in-spelling) | |
| 09:31 | Improved consistency for --help option descriptions. ... (check-in: 2e56ef4e8d user: km tags: trunk) | |
| 09:00 | Improved consistency for --help option descriptions: begin with uppercase letter; do not use a period at the end of short-ish sentences. ... (Closed-Leaf check-in: de684083c6 user: km tags: spelling-fixes) | |