Many hyperlinks are disabled.
Use anonymous login
to enable hyperlinks.
Changes In Branch security-risk Excluding Merge-Ins
This is equivalent to a diff from 86d4754a7a to d407e22fed
2017-07-03
| ||
13:54 | On the server.wiki page, point to the source code comments that describe the various CGI options. check-in: a8910101c3 user: drh tags: trunk | |
13:48 | On the server.wiki page, point to the source code comments that describe the various CGI options. Closed-Leaf check-in: d407e22fed user: drh tags: security-risk | |
11:26 | On the /test_env page, show the AUTH_CONTENT and AUTH_TYPE environment variables in "cookie" mode. - On second thought, better to not show these, since they can expose passwords on screen. check-in: d28cb283f3 user: drh tags: security-risk | |
10:36 | Suggestion for 2.3 release: Eliminate the need for SQLITE_PREPARE_PERSISTENT, which makes fossil work with SQLite 3.19.3. check-in: 1eab060a84 user: jan.nijtmans tags: fossil-2.3-with-older-SQLite | |
09:31 | Update changes.wiki. Some eol-spacing check-in: 86d4754a7a user: jan.nijtmans tags: trunk | |
2017-07-02
| ||
18:22 | On the /test_env page, report the values of the REMOTE_USER and HTTP_AUTHENTICATION environment variables, if they exist. check-in: 4207a04072 user: drh tags: trunk | |
Changes to src/style.c.
︙ | |||
1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 | 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 | + + + + | if( i>0 ){ @ anonymous-adds = %s(zCap)<br /> } @ g.zRepositoryName = %h(g.zRepositoryName)<br /> @ load_average() = %f(load_average())<br /> @ <hr /> P("HTTP_USER_AGENT"); if( showAll ){ P("AUTH_CONTENT"); P("AUTH_TYPE"); } cgi_print_all(showAll); if( showAll && blob_size(&g.httpHeader)>0 ){ @ <hr /> @ <pre> @ %h(blob_str(&g.httpHeader)) @ </pre> } |
︙ |
Changes to www/server.wiki.
︙ | |||
174 175 176 177 178 179 180 | 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 | + - + | It may be necessary to set permissions properly, or to modify an ".htaccess" file or make other server-specific changes. Consult the documentation for your particular web server. In particular, the following permissions are <em>normally</em> required (but, again, may be different for a particular configuration): <ul> <li>The Fossil binary (/usr/bin/fossil in the example above) |
︙ | |||
211 212 213 214 215 216 217 218 219 220 221 222 223 224 | 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 | + + + + + | notfound: http://url-to-go-to-if-repo-not-found/ </pre></blockquote> </p> <p> Once deployed, a URL like: <b>http://mydomain.org/cgi-bin/repo/XYZ</b> will serve up the repository "/home/fossil/repos/XYZ.fossil" (if it exists). </p> <p> Additional options available to the CGI script are documented in the source code. As of 2017-07-02, the available options are described at [/artifact/9a52a07b?ln=1777-1824|main.c lines 1777 through 1824]. </p> </blockquote> <a name="scgi"></a> <h2>Fossil as SCGI</h2><blockquote> <p> The [/help/server|fossil server] command, described above as a way of |
︙ |