Fossil

Check-in [d3090e91b8]
Login

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Overview
Comment:Improved on-line help for the allow-symlinks setting.
Downloads: Tarball | ZIP archive
Timelines: family | ancestors | descendants | both | sec2020
Files: files | file ages | folders
SHA3-256: d3090e91b8a2bea3c12346a022c42405088969ddb3dcdb37ba70e2dd6c23d339
User & Date: drh 2020-08-21 10:23:51.673
Context
2020-08-21
10:29
More improvements to the allow-symlinks help text. check-in: f7f31147de user: drh tags: sec2020
10:23
Improved on-line help for the allow-symlinks setting. check-in: d3090e91b8 user: drh tags: sec2020
10:10
Improve comments on symlink logic check-in: 39a5df1fde user: drh tags: sec2020
Changes
Unified Diff Ignore Whitespace Patch
Changes to src/db.c.
3549
3550
3551
3552
3553
3554
3555
3556

3557
3558
3559

3560
3561
3562
3563


3564
3565
3566

3567

3568
3569
3570
3571
3572
3573
3574
**
** When the admin-log setting is enabled, configuration changes are recorded
** in the "admin_log" table of the repository.
*/
/*
** SETTING: allow-symlinks  boolean default=off sensitive
**
** When allow-symlinks is OFF (which is the default and recommended setting)

** symbolic links a treated like text files that contain a single line of
** content which is the name of their target.  If allow-symlinks is ON,
** the symbolic links are actually followed.

**
** The use of symbolic links is dangerous.  If you checkout a maliciously
** crafted checkin that contains symbolic links, it is possible that files
** outside of the working directory might be overwritten.


**
** Keep this setting OFF unless you have a very good reason to turn it
** on and you implicitly trust the integrity of the repositories you

** open.

*/
/*
** SETTING: auto-captcha    boolean default=on variable=autocaptcha
** If enabled, the /login page provides a button that will automatically
** fill in the captcha password.  This makes things easier for human users,
** at the expense of also making logins easier for malicious robots.
*/







|
>
|
<
|
>

|
|
<
>
>

<
<
>
|
>







3549
3550
3551
3552
3553
3554
3555
3556
3557
3558

3559
3560
3561
3562
3563

3564
3565
3566


3567
3568
3569
3570
3571
3572
3573
3574
3575
3576
**
** When the admin-log setting is enabled, configuration changes are recorded
** in the "admin_log" table of the repository.
*/
/*
** SETTING: allow-symlinks  boolean default=off sensitive
**
** When allow-symlinks is OFF, Fossil does not see symbolic links on disk as
** a separate class of object.  Instead Fossil sess the object that the
** symbolic link points to.  Fossil will only manage with files and directories,

** not symbolic links.  When a symbolic link is added to a repository, the
** object that the link points to is added, not the link itself.
**
** When allow-symlinks is ON, Fossil sees symbolic links on disk as a separate
** object class that distinct from files and directories.  When a symbolic link

** is added to a repository, Fossil stores just the target filename.  In other
** words, Fossil stores the link itself, not the object that the link points to.
**


** Symbolic links are not cross-platform.  They are not available on all
** operating systems and file systems.  Hence the allow-symlinks setting is
** OFF by default, for portability.
*/
/*
** SETTING: auto-captcha    boolean default=on variable=autocaptcha
** If enabled, the /login page provides a button that will automatically
** fill in the captcha password.  This makes things easier for human users,
** at the expense of also making logins easier for malicious robots.
*/