Differences From Artifact [e4fb0f8592]:

• File src/xfer.c — part of check-in [18628904c3] at 2025-07-27 11:07:38 on branch trunk — Teach the sync protocol how to work with an out-of-band login card, saving an extra server-side copy of the sync content which is required only to account for an inlined login card. i.e. it saves RAM, potentially lots of it. The new login card mechanism is instead transported via an HTTP header. This also, not coincidentally, simplifies implementation of the login card in non-fossil(1) clients which are currently learning to speak the sync protocol. (user: stephan size: 102677) [more...]

To Artifact [1642b100fa]:

• File src/xfer.c — part of check-in [f9547c7c84] at 2025-08-15 12:32:39 on branch relaxed-clone-permissions — Allow /xfer to service anonymous clones if they have any of the Clone, Zip, or Read permissions. This is a temporary measure, as described in the code's comments. (user: stephan size: 102973)

1295
1296
1297
1298
1299
1300
1301











1302
1303
1304
1305
1306
1307
1308

  if( fossil_strcmp(PD("REQUEST_METHOD","POST"),"POST") ){
     fossil_redirect_home();
  }
  g.zLogin = "anonymous";
  login_set_anon_nobody_capabilities();
  login_check_credentials();
  cgi_check_for_malice();











  memset(&xfer, 0, sizeof(xfer));
  blobarray_zero(xfer.aToken, count(xfer.aToken));
  cgi_set_content_type(g.zContentType);
  cgi_reset_content();
  if( db_schema_is_outofdate() ){
    @ error database\sschema\sis\sout-of-date\son\sthe\sserver.
    return;

>
>
>
>
>
>
>
>
>
>
>

1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319

  if( fossil_strcmp(PD("REQUEST_METHOD","POST"),"POST") ){
     fossil_redirect_home();
  }
  g.zLogin = "anonymous";
  login_set_anon_nobody_capabilities();
  login_check_credentials();
  cgi_check_for_malice();
#if 1
  /*
  ** 2025-08-15: temporary measure for
  ** https://sqlite.org/forum/forumpost/7d3eb059f81ff694
  ** specifically the response at
  ** https://sqlite.org/forum/forumpost/e735c8c142.
  */
  if( g.perm.Clone || g.perm.Read || g.perm.Zip ){
    g.perm.Read = g.perm.Clone = 1;
  }
#endif
  memset(&xfer, 0, sizeof(xfer));
  blobarray_zero(xfer.aToken, count(xfer.aToken));
  cgi_set_content_type(g.zContentType);
  cgi_reset_content();
  if( db_schema_is_outofdate() ){
    @ error database\sschema\sis\sout-of-date\son\sthe\sserver.
    return;