Check-in [30f60a58a5]
Not logged in

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Overview
Comment:Fix an XSS problem in the chng= query parameter to /timeline.
Timelines: family | ancestors | descendants | both | trunk
Files: files | file ages | folders
SHA3-256:30f60a58a5ee9d89ba3ecc1efbeeb5514614fa26d4985be60f7573db94ba7217
User & Date: drh 2018-06-06 17:55:02
Context
2018-06-07
00:45
Disable the feature that changes the foreground color of the graph based on the background color of the item, as the item background color no longer extends under the graph. check-in: 7ac88481a6 user: drh tags: trunk
2018-06-06
17:55
Fix an XSS problem in the chng= query parameter to /timeline. check-in: 30f60a58a5 user: drh tags: trunk
2018-06-05
23:06
Fix a bug in the pivot-finder introduced by check-in [917f1c21e52a29904] from 5 days ago. check-in: 83789c6e53 user: drh tags: trunk
Changes

Changes to src/timeline.c.

1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
      glob_expr("filename.name", zChng));
}
static void addFileGlobDescription(
  const char *zChng,        /* The filename GLOB list */
  Blob *pDescription        /* Result description */
){
  if( zChng==0 || zChng[0]==0 ) return;
  blob_appendf(pDescription, " that include changes to files matching %Q",
               zChng);
}

/*
** Tag match expression type code.
*/
typedef enum {







|







1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
      glob_expr("filename.name", zChng));
}
static void addFileGlobDescription(
  const char *zChng,        /* The filename GLOB list */
  Blob *pDescription        /* Result description */
){
  if( zChng==0 || zChng[0]==0 ) return;
  blob_appendf(pDescription, " that include changes to files matching '%h'",
               zChng);
}

/*
** Tag match expression type code.
*/
typedef enum {