Differences From Artifact [c2b66b723c]:

• File src/skins.c — part of check-in [8581e376c3] at 2024-08-23 15:53:44 on branch trunk — Minor typo fix in a comment. (user: drh size: 45883) [more...]

To Artifact [b7906d4822]:

• File src/skins.c — part of check-in [2da41072ff] at 2025-03-07 15:56:57 on branch enhanced-defenses — Enhance codecheck1.c to detect cases where style_header() is called with arguments that are not easily proven to be HTML-free. Fix multiple calls to style_header() to prove they are always HTML-free. (user: drh size: 45883)

994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008

  if( P("revert")!=0 && cgi_csrf_safe(2) ){
    zContent = zDflt;
    isRevert = 1;
  }

  db_begin_transaction();
  style_set_current_feature("skins");
  style_header("%s", zTitle);
  for(j=0; j<count(aSkinAttr); j++){
    style_submenu_element(aSkinAttr[j].zSubmenu,
          "%R/setup_skinedit?w=%d&basis=%h&sk=%d",j,zBasis,iSkin);
  }
  @ <form action="%R/setup_skinedit" method="post"><div>
  login_insert_csrf_secret();
  @ <input type='hidden' name='w' value='%d(ii)'>

|

994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008

  if( P("revert")!=0 && cgi_csrf_safe(2) ){
    zContent = zDflt;
    isRevert = 1;
  }

  db_begin_transaction();
  style_set_current_feature("skins");
  style_header("%h", zTitle);
  for(j=0; j<count(aSkinAttr); j++){
    style_submenu_element(aSkinAttr[j].zSubmenu,
          "%R/setup_skinedit?w=%d&basis=%h&sk=%d",j,zBasis,iSkin);
  }
  @ <form action="%R/setup_skinedit" method="post"><div>
  login_insert_csrf_secret();
  @ <input type='hidden' name='w' value='%d(ii)'>