Timeline
Not logged in

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

26 check-ins using file src/setup.c version 7fd94e5916

2025-08-18
11:45
Additional obfuscation of the javascript that runs to implement the anti-robot defense. check-in: 4c4bce351d user: drh tags: trunk
2025-08-17
19:38
Wrap the robot_restrict() JS check in an onload handler so that it won't run until the external resources (namely style.css) are loaded. check-in: e5991efb68 user: stephan tags: trunk
19:04
Improvements to robot detection in the robot_restrict() function. check-in: e5b00c610d user: drh tags: trunk
19:02
Obfuscation of the robot-test code. Closed-Leaf check-in: 2fdd7ace52 user: drh tags: robotck-instant
18:44
Merge the robot tests from trunk with the new tests from this branch so that *all* the tests are run. check-in: 95a57c637f user: drh tags: robotck-instant
18:33
Merge recent trunk enhancements into the robotck-instant branch. check-in: dd11b563f4 user: drh tags: robotck-instant
18:20
Use the UserAgent value from the HTTP request header, rather than the client IP address, as the additional factor in the anonymous login cookie hash, since some client are on networks where their IP address can shift frequently. check-in: 0693766805 user: drh tags: trunk
17:47
Because this new check is too fast to see the progress indicator, make the final result label more explicit. check-in: b6cf0c2052 user: stephan tags: robotck-instant
17:16
Make anonymous cookies valid for 8 hours. Include the client IP address as part of the cookie hash, but do not display the client IP address within the text of the cookie. check-in: 68da4784aa user: drh tags: trunk
15:37
Move the z-level style into default.css, in case the adversaries read inlined STYLE tags (which now, in hindsight, seems more likely to me). Change the HTTP result code from robot_proofofwork() to a non-200 code, the hope being that the adversaries will stop on a non-200 code. check-in: c7ad43638d user: stephan tags: robotck-instant
15:00
Remove some dead code from /chat. check-in: 144c5dbe00 user: stephan tags: trunk
14:52
Correct a mis-calculation of fontSize for /chat attachments which use the Embed checkbox. check-in: e3f0dcc325 user: stephan tags: trunk
13:21
Add a comment explaining why document.body's z-level is explicitly set to 0. Remove some EOL whitespace. check-in: 7c57a20ebd user: stephan tags: robotck-instant
12:52
Add (stash rename) to the changelog. check-in: c834adb656 user: stephan tags: trunk
12:50
Add (stash rename) subcommand to change the label associated with a stash entry. check-in: 1aaa6fc58d user: stephan tags: trunk
12:29
Fix the previous checkin to actually compute the work value. This slows it down by a tiny fraction of a second but it's still effectively instant. This calculation can be moved up a level into the C code to turn this back into an instant operation, but leaving it on the client seems like a reasonable choice. check-in: c27cfa9f60 user: stephan tags: robotck-instant
12:10
An experiment in reducing the proof-of-work to a single operation. (This description is intentionally vague.) check-in: b765e65267 user: stephan tags: robotck-instant
2025-08-16
16:48
Add a simple UI that allows any registered user (not "anonymous" or "nobody") to create access tokens. check-in: 2a3d303124 user: drh tags: trunk
15:54
Change the name of the robot-test cookie to fossil-client-ok. Decode that cookie's meaning on the /cookies page. check-in: dc2232c6bd user: drh tags: trunk
14:44
Cache the results of calling robot_restrict() so that subsequent calls are very fast. check-in: 1bdda5d01d user: drh tags: trunk
14:20
Open up access to /test-robotck to all users. Clear the "Press OK to continue" from the screen when the Ok button is pressed, so that it does not linger for zip and tarball downloads. check-in: 508d3cd98a user: drh tags: trunk
13:59
Improvements and simplifications to anti-robot defenses. check-in: 16b33097fe user: drh tags: trunk
13:57
Improved anti-robot captcha. Closed-Leaf check-in: 206089acd1 user: drh tags: robot-restrict-simplified
00:36
Add the "timelineX" tag to robot-restrict processing. Move /honeypot over to the captcha.c file and have it use the resources found there. check-in: 54afc94ce0 user: drh tags: robot-restrict-simplified
2025-08-15
23:46
Convert the g.isHuman variable into g.isRobot. check-in: 6422bca15d user: drh tags: robot-restrict-simplified
23:18
Simplifications to the logic that tries to keep robots out. check-in: 02adced1c1 user: drh tags: robot-restrict-simplified