This Day In History For 2026-08-14
1 Year Ago (more context)
|
2025-08-14
| ||
| 21:01 | The "/login?anon=2" page demonstrates the captcha even if the user is currently logged in. check-in: e58112a4f3 user: drh tags: trunk | |
| 19:35 | Improved captcha screen. Less clutter. Easier for first-time visitors to digest. check-in: 6c8c93a5f7 user: drh tags: trunk | |
| 12:46 | Reduce the timeout for anonymous logins to 1 hours. Add the IP address to the anonymous login cookie. check-in: 60a9fac4e1 user: drh tags: trunk | |
2 Years Ago (more context)
|
2024-08-14
| ||
| 09:17 | Add timeline-hard-newlines to CONFIGSET_SKIN in an attempt to resolve [forum:23d58b1b67|forum post 23d58b1b67]. Bring /json/config up to date with the central config option list. check-in: 89388d4c60 user: stephan tags: trunk | |
3 Years Ago (more context)
|
2023-08-14
| ||
| 21:09 | Make sure the EmailEvent object is completely zeroed whenever it is allocated. check-in: 33877fa50b user: drh tags: trunk | |
4 Years Ago (more context)
|
2022-08-14
| ||
| 19:53 | The chown -R bit added to the Dockerfile touches /jail/bin/fossil, which causes "docker build" to promote it back into a new layer, nearly doubling the container size. Doing a chown now only on two directories, restoring it to its sub-9M size. check-in: 00cc9c3eb1 user: wyoung tags: trunk | |
| 19:42 | Fossil's chroot feature drops root permissions based on file ownership, but since the container was built with everything-root, its HTTP hit handling children would run as whatever host-side UID/GID pair you used for file ownership. What happened next was complex. If you let the container create the repo internally, it would be owned as root, so it would drop root permissions for…root! This isn't super-bad, since Fossil is presumed secure and is double-jailed besides. The risk is, if anyone works out an RCE for Fossil, they might be able to get it to create raw sockets or do various other types of escapes despite the double-jail dance. Attaching a Docker volume brings external permisssions into the container. We were recommending a "chown 0" command on the shared volume to make it similar to the in-container case, but that opens you to the same risks above. If you ignored this and used host-side UID/GID pairs, Fossil would then be left running under IDs that didn't exist internally, which could cause assorted weirdness. We're now creating an explicit "fossil" user/group pair inside the container and recommending that Docker volumes use these IDs for copied-in files to batten down something that shouldn't've been left flapping. Updated build.wiki to cover all this. check-in: ba21bc0b8f user: wyoung tags: trunk | |
| 19:33 | Resolved timeline segfault reported in [forum:0bbb66eee4ba35db|forum post 0bbb66eee4ba35db], triggered by entries with NULL checkin messages. check-in: 20eab78592 user: stephan tags: trunk | |
| 18:48 | Moved the SIGTERM handler up before the "fossil server" HTTP hit handler. We had it clustered with the other signal() calls, but those are to handle signals intended to occur only during CGI processing. This one will normally occur while we're blocked, waiting for the HTTP hit to occur, so it had no useful effect where it was. check-in: d3c55fe024 user: wyoung tags: trunk | |
| 18:01 | Changed previous to call fossil_exit() instead of exit(3) so we close our databases before dying. check-in: 7c857d2233 user: wyoung tags: trunk | |
| 17:59 | The parent process now handles SIGTERM with an explicit exit(3) call when its PID is 1, as when it's running as "fossil server" in a Docker container. Without this, the container host's shutdown process takes a long time because it's waiting on PID 1 to die and eventually has to time out and kill it. check-in: 1d09e60739 user: wyoung tags: trunk | |
| 16:19 | Markup fix check-in: cf1497877a user: wyoung tags: trunk | |
| 16:18 | Clarified the fact that the "docker cp" command is changing the name of the repository DB file. check-in: f0b15a37fc user: wyoung tags: trunk | |
| 16:15 | Slight emphasis fix in previous check-in: 1441c2e6d3 user: wyoung tags: trunk | |
| 16:13 | Edit pass on §5.1 of build.wiki, fixing a number of unclear bits, particularly with regard to images vs containers. check-in: e2b9114b18 user: wyoung tags: trunk | |
| 08:54 | Merge with trunk to get the latest web UI fixes. check-in: e317872280 user: florian tags: timeline-keyboard-navigation | |
| 08:16 | Comment and TODO updates. check-in: cfed59c9d1 user: florian tags: timeline-keyboard-navigation | |
| 08:07 | Cancel default actions and further bubbling of handled keys, in case of conflicts with browser (extension) defaults. check-in: 5257960080 user: florian tags: timeline-keyboard-navigation | |
| 08:03 | Fix the shortcut handler to cycle between selected, check-out and ticked entries getting stuck, and give highest priority to ticked entries. check-in: b6a656b520 user: florian tags: timeline-keyboard-navigation | |
| 07:56 | Remap keyboard shortcuts, and ensure only letter keys are combined with SHIFT, as non-letter keys may produce different key code pairs with and without SHIFT depending on the keyboard layout. check-in: 33f9315d44 user: florian tags: timeline-keyboard-navigation | |
5 Years Ago (more context)
|
2021-08-14
| ||
| 22:06 | Remember the URLs for Git-mirror syncs. Show them on the /urllist page. check-in: 458b35a507 user: drh tags: trunk | |
| 18:25 | Further improvements to "fossil all git status" output. Do not show repositories for which the git export repository does not exist or is inactive. check-in: 999d838de2 user: drh tags: trunk | |
| 18:00 | Improved output (less clutter) from the "fossil all git status" command. Results are only shown from repositories that actually have a Git mirror. check-in: 9179663d8c user: drh tags: trunk | |
15 Years Ago (more context)
|
2011-08-14
| ||
| 23:14 | Merge the ben-testing branch into trunk. check-in: 9a0c995826 user: drh tags: trunk | |
| 23:12 | Fix the file_relative_name() function so that it works on windows. Closed-Leaf check-in: 47b5bf7d16 user: drh tags: ben-testing | |
| 17:54 | Remove the seperate versionable version of db_get(), which now uses ctrlSettings to determine whether a setting is versionable or not. check-in: 3113f7b18f user: ben tags: ben-testing | |
| 07:21 | Merge trunk into ben-testing, adjusting for versionable settings. check-in: 246ac307bb user: ben tags: ben-testing | |
| 07:13 | Change the relative-paths default to 'on', after feedback from the community. check-in: 42a830e76d user: ben tags: ben-testing | |