Differences From Artifact [2fe42bf4b0]:

• File src/cgi.c — part of check-in [24e015de71] at 2024-02-23 15:24:53 on branch trunk — Add the "default-skin" setting which defines which built-in skin to use if no skin is otherwise specified. On the /skins page, show how the current skin is selected, if that is relevant. Add the /fdscookie page that shows just the "fossil_display_settings" cookie rather than all cookies. (user: drh size: 85952) [more...]

To Artifact [3f940b52bf]:

• File src/cgi.c — part of check-in [08df33aa4c] at 2024-04-09 17:38:01 on branch trunk — Defend against undefined values in query parameters in the cgi_check_for_malice() routine. (user: drh size: 86001)

2772
2773
2774
2775
2776
2777
2778
2779
2780
2781


2782

2783
2784
2785
2786

** implementation as possible, ideally just before it begins doing
** potentially CPU-intensive computations and after all query parameters
** have been consulted.
*/
void cgi_check_for_malice(void){
  struct QParam * pParam;
  int i;
  for(i = 0; i < nUsedQP; ++i){
    pParam = &aParamQP[i];
    if(0 == pParam->isFetched


       && fossil_islower(pParam->zName[0])){

      cgi_value_spider_check(pParam->zValue, pParam->zName);
    }
  }
}

|

|
>
>
|
>

2772
2773
2774
2775
2776
2777
2778
2779
2780
2781
2782
2783
2784
2785
2786
2787
2788
2789

** implementation as possible, ideally just before it begins doing
** potentially CPU-intensive computations and after all query parameters
** have been consulted.
*/
void cgi_check_for_malice(void){
  struct QParam * pParam;
  int i;
  for(i=0; i<nUsedQP; ++i){
    pParam = &aParamQP[i];
    if( 0==pParam->isFetched
     && pParam->zValue!=0
     && pParam->zName!=0
     && fossil_islower(pParam->zName[0])
    ){
      cgi_value_spider_check(pParam->zValue, pParam->zName);
    }
  }
}