Many hyperlinks are disabled.
Use anonymous login
to enable hyperlinks.
Overview
| Comment: | permissive-manifest-parser setting is now marked as sensitive to keep an attacker from turning it on. |
|---|---|
| Downloads: | Tarball | ZIP archive |
| Timelines: | family | ancestors | sec2020-deadend |
| Files: | files | file ages | folders |
| SHA3-256: |
1e34705ed8a38f6810c8237d1323fd58 |
| User & Date: | stephan 2020-08-18 17:25:16.111 |
Context
|
2020-08-18
| ||
| 17:25 | permissive-manifest-parser setting is now marked as sensitive to keep an attacker from turning it on. Closed-Leaf check-in: 1e34705ed8 user: stephan tags: sec2020-deadend | |
| 16:07 | Added and applied permissive-manifest-parser setting to permit parsing of manifests which have F-cards containing now-illegal names. Required for rebuild of historical data and support of repositories we now know to contain such files. check-in: 9e59cf18fc user: stephan tags: sec2020-deadend | |
Changes
Changes to src/db.c.
| ︙ | ︙ | |||
3925 3926 3927 3928 3929 3930 3931 | ** commits. If enabled on a server, whenever a client attempts ** to obtain a check-in lock during auto-sync, the server will ** send the "pragma avoid-delta-manifests" statement in its reply, ** which will cause the client to avoid generating a delta ** manifest. */ /* | | | 3925 3926 3927 3928 3929 3930 3931 3932 3933 3934 3935 3936 3937 3938 3939 | ** commits. If enabled on a server, whenever a client attempts ** to obtain a check-in lock during auto-sync, the server will ** send the "pragma avoid-delta-manifests" statement in its reply, ** which will cause the client to avoid generating a delta ** manifest. */ /* ** SETTING: permissive-manifest-parser boolean default=off sensitive ** By default, fossil fatally fails if any files are found in a ** manifest which have a name matching a checkout database name. In ** order to support repositories where such files were inadvertently ** checked in, this setting, when on, allows such files to be handled ** as if they were normal files. Only enable this if absolutely ** necessary to support older repositories which have such files ** checked in (anywhere in their history). It should never be enabled |
| ︙ | ︙ |