Fossil

Check-in [4675fc70ba]
Login

Check-in [4675fc70ba]

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Overview
Comment:Fix to the sizing of the iframe for HTML in the /info page so that it works with CSP unsafe-inline.
Downloads: Tarball | ZIP archive
Timelines: family | ancestors | descendants | both | trunk
Files: files | file ages | folders
SHA3-256: 4675fc70ba3b9750c000c7a2a442cf457e47369f94684fe326a56177e4879d33
User & Date: drh 2018-11-30 13:00:37.028
Context
2018-11-30
13:07
Allow the Admin user to modify the skin. ... (check-in: 257318c1ca user: drh tags: trunk)
13:00
Fix to the sizing of the iframe for HTML in the /info page so that it works with CSP unsafe-inline. ... (check-in: 4675fc70ba user: drh tags: trunk)
01:11
Add the backoffice-disable setting to completely disable all backoffice processing. ... (check-in: 2467a356fe user: drh tags: trunk)
Changes
Unified Diff Ignore Whitespace Patch
Changes to src/info.c.
︙︙
2127
2128
2129
2130
2131
2132
2133
2134




2135


2136
2137
2138
2139
2140
2141
2142
2143

    @ <hr />
    content_get(rid, &content);
    if( renderAsWiki ){
      wiki_render_by_mimetype(&content, zMime);
    }else if( renderAsHtml ){
      @ <iframe src="%R/raw/%T(blob_str(&downloadName))?name=%s(zUuid)"
      @ width="100%%" frameborder="0" marginwidth="0" marginheight="0"
      @ sandbox="allow-same-origin"




      @ onload="this.height=this.contentDocument.documentElement.scrollHeight;">


      @ </iframe>
    }else{
      style_submenu_element("Hex", "%s/hexdump?name=%s", g.zTop, zUuid);
      blob_to_utf8_no_bom(&content, 0);
      zMime = mimetype_from_content(&content);
      @ <blockquote>
      if( zMime==0 ){
        const char *z;








|
>
>
>
>
|
>
>
|








2127
2128
2129
2130
2131
2132
2133
2134
2135
2136
2137
2138
2139
2140
2141
2142
2143
2144
2145
2146
2147
2148
2149

    @ <hr />
    content_get(rid, &content);
    if( renderAsWiki ){
      wiki_render_by_mimetype(&content, zMime);
    }else if( renderAsHtml ){
      @ <iframe src="%R/raw/%T(blob_str(&downloadName))?name=%s(zUuid)"
      @ width="100%%" frameborder="0" marginwidth="0" marginheight="0"
      @ sandbox="allow-same-origin" id="ifm1">
      @ </iframe>
      @ <script nonce="%h(style_nonce())">
      @ document.getElementById("ifm1").addEventListener("load",
      @   function(){
      @     this.height=this.contentDocument.documentElement.scrollHeight + 75;
      @   }
      @ );
      @ </script>
    }else{
      style_submenu_element("Hex", "%s/hexdump?name=%s", g.zTop, zUuid);
      blob_to_utf8_no_bom(&content, 0);
      zMime = mimetype_from_content(&content);
      @ <blockquote>
      if( zMime==0 ){
        const char *z;
︙︙