Fossil

Timeline
Login

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

100 most recent check-ins

2025-10-04
19:22
Simplified a command pair to a one-liner in the containers doc section about setting up email alerts. ... (Leaf check-in: 819da69d user: wyoung tags: trunk)
2025-10-03
17:31
Fix spelling errors found by the Debian QA tools. ... (check-in: 7db623e5 user: danield tags: trunk)
17:27
Improve the recommented value for robot-exception. ... (check-in: 3bbd18a2 user: drh tags: trunk)
16:05
Allow URLs of the form /tarball/TAG/VERSION/NAME.tar.gz for the tarball page where TAG must be a non-branch tag associated with VERSION. This is so that the robot-exception pattern can match things like /tarball/release while will allowing access to historical releases via the VERSION section of the URL. ... (check-in: 57c8bec8 user: drh tags: trunk)
14:36
Remove a pointless source code test from "make test" ... (check-in: 871f6b36 user: drh tags: trunk)
14:09
Disable the "settings" test module, which doesn't work for unknown reasons, and because it does not seem to accomplish very much for all the TCL complication that it adds. ... (check-in: 4619d2ef user: drh tags: trunk)
2025-10-02
19:36
Align the delta_parse() debug function with the SQLite sources. ... (check-in: a8dbbac9 user: drh tags: trunk)
14:14
Update the built-in SQLite to the latest trunk check-in for beta testing. ... (check-in: 3ca3a6a6 user: drh tags: trunk)
01:48
Correct some of the calculations and reduce code by reusing existing decoder. ... (Leaf check-in: 08df9ea0 user: andybradford tags: md5-color-hash)
2025-10-01
05:33
Attempt to preserve more of the randomness generated by MD5. ... (check-in: f9d36180 user: andybradford tags: md5-color-hash)
2025-09-30
18:13
Update the version number 2.28 to begin the next dev cycle. ... (check-in: c8fcc971 user: drh tags: trunk)
11:03
Version 2.27 ← This is me! ... (check-in: 99675884 user: drh tags: trunk, release, version-2.27)
10:59
Change to the wrong branch. ... (Closed-Leaf check-in: 52558546 user: drh tags: mistake)
05:17
Use MD5 to generate the color hash as it's a random function. ... (check-in: d4caf785 user: andybradford tags: md5-color-hash)
2025-09-27
16:26
Switch to time based color hash generation for other pages (brlist, finfo, info, and ci_edit). Now abandoned. ... (Closed-Leaf check-in: 4a90f335 user: andybradford tags: datetime-color-hash)
15:05
Avoid an unnecessary mprintf(). ... (check-in: bd4cec12 user: danield tags: trunk)
11:57
Further reduce divergence between the SQLite and Fossil implementations of regexp.c. Fix compiler warnings for MSVC. ... (check-in: a18dab41 user: drh tags: trunk)
11:10
Update the built-in SQLite to the latest trunk version so that it will compile without warnings on Windows. ... (check-in: 702a56d1 user: drh tags: trunk)
00:47
Use the datetime of the start of the branch as the input for the color hash. See suggestion made by Stephan Beal in forum post a9a92d73c4a172f9. ... (check-in: 1851b26d user: andybradford tags: datetime-color-hash)
2025-09-26
20:07
Add a new setting "regexp-limit" that determines the maximum size of a REGEXP virtual machine. Default value 1000. ... (check-in: 82888a0d user: drh tags: trunk)
14:23
Updates to the changelog. ... (check-in: 28483bfc user: danield tags: trunk)
14:12
Update the change log. ... (check-in: 3a0dfc89 user: drh tags: trunk)
13:36
Bring the built-in SQLite and the regexp implementation into alignment with upstream. ... (check-in: 9642cde3 user: drh tags: trunk)
12:58
Sync with trunk. ... (Leaf check-in: c321b7e4 user: florian tags: standard-cli-colors)
12:57
Sync with trunk. ... (Leaf check-in: 779fe3e1 user: florian tags: diff-word-wrap)
12:53
Sync with trunk. ... (Leaf check-in: f3ff0446 user: florian tags: diff-keyboard-navigation)
12:50
Sync with trunk. ... (Leaf check-in: 9cea672b user: florian tags: timeline-keyboard-navigation)
12:48
Prevent the cell background colors from extending beyond the outer rounded borders of the diff table in WebKit-based browsers. ... (check-in: b666bbc5 user: florian tags: trunk)
11:58
Add the -h option to the "ls" command to display file hashes for a specific check-in when in verbose mode. ... (check-in: 4c0ff6ed user: danield tags: trunk)
2025-09-25
08:30
Simplify the previous commit. ... (check-in: b12e52aa user: florian tags: trunk)
08:00
Prevent successfully completed robot checks from reappearing and force incomplete checks to start over when navigating back and forward. ... (check-in: 4cc0881d user: florian tags: trunk)
2025-09-24
19:29
Update the built-in SQLite to the latest trunk check-in for testing. ... (check-in: 3041904d user: drh tags: trunk)
2025-09-21
04:16
Fix an out-of-bounds array access in the function to decode a UTF-8 sequence (similar to a problem reported on the SQLite Forum: https://sqlite.org/forum/forumpost/184b372388). ... (check-in: 59879abe user: florian tags: trunk)
2025-09-16
10:47
Enable cache of the CSS style sheet. ... (Leaf check-in: 0c1de587 user: drh tags: cache-style-sheet)
2025-09-11
21:44
Fix the "Download" submenu item on the /artifact page such that the at= query parameter is the actual basename of the file being downloaded, when available. ... (check-in: b1e811c3 user: drh tags: trunk)
15:43
Fix links with truncated symbolic names in /vdiff, as reported in forum post 690436f85e. ... (check-in: 2871b39a user: danield tags: trunk)
10:17
Add a missing return in cgi_fread() for builds without FOSSIL_ENABLE_SSL. ... (check-in: 1cd81630 user: stephan tags: trunk)
2025-09-10
14:29
Update to a newer SQLite that fixes a bug in the SQLite CLI so that it will once again compile on 32-bit windows. ... (check-in: fb869787 user: drh tags: trunk)
11:40
Update to the change log ... (check-in: 1042d645 user: drh tags: trunk)
10:51
Update the built-in SQLite to the latest trunk for testing. ... (check-in: dc45faa3 user: drh tags: trunk)
10:49
Fix encoding of hyperlinks synthesized by the manifest parser. ... (check-in: 55e9a2ff user: drh tags: trunk)
02:46
Correct misspelled word in timeline HTML output. ... (check-in: 3d1a1ec0 user: andybradford tags: trunk)
2025-09-09
14:23
This should be encoded for URL/HTTP not HTML to avoid broken URLs when symbolic tags have spaces, ampersands, and other things that need proper escaping. ... (Closed-Leaf check-in: 25c0da01 user: andybradford tags: fix-timeline-moves)
2025-09-05
15:20
Fix the error log parsing so that timeouts do not appear as panics. ... (check-in: b2ace883 user: drh tags: trunk)
2025-09-04
12:00
Fix compiler warning and improve performance in previous check-in. ... (check-in: 9d7c15d4 user: drh tags: trunk)
2025-09-02
22:10
Allow the plus sign in MIME types again, needed for example in 'application/rss+xml'. ... (check-in: 639c0404 user: danield tags: trunk)
12:52
Minor internal doc updates. No code changes. ... (check-in: 65448438 user: stephan tags: trunk)
12:51
Change the link to fnc to use its new canonical home, fnc.sh, as pointed out by Florian in the forum. ... (check-in: accce714 user: stephan tags: trunk)
2025-09-01
17:17
Finish writing a doc sentence started in the previous checkin. ... (check-in: 7a3d6d70 user: stephan tags: trunk)
16:58
Add a CSRF check to /chat-send. ... (check-in: 4caa8cb9 user: stephan tags: trunk)
15:37
Reject all GET/COOKIE vars in which the values contain control characters. ... (check-in: 0c1419a4 user: stephan tags: trunk)
15:27
An alternate approach to [ae8fc0e0b5e6] which instead rejects all GET and COOKIE values which, after decoding, contain any control characters. We have(?) no(?) use cases where control characters are legitimately needed for GET/COOKIE values. ... (Closed-Leaf check-in: c61ae84c user: stephan tags: no-ctrl-chars)
14:15
Primative validation of request-supplied mime-types. ... (check-in: ae8fc0e0 user: drh tags: trunk)
2025-08-22
15:49
When deleting cookies via /cookies, use a path of "/" for ROBOT_COOKIE. The alternative would be to set that cookie to be repo-local (i.e. set its path to g.zTop), which would be unfortunate for servers which host many fossils. ... (check-in: 55c97210 user: stephan tags: trunk)
13:59
Add the /re_rules page. ... (check-in: 8779bd0b user: drh tags: trunk)
01:51
Fix a typo in the regular expression example for robot-exception ... (check-in: 31b09807 user: drh tags: trunk)
2025-08-21
19:10
Activate the robot-restrict "timelineX" flag if the c= query parameter is used. ... (check-in: 59ae0e0b user: drh tags: trunk)
16:21
Do not change the /info diff-type to 0 if robot-restrict is turned off. Forum post 1bef6821de. ... (check-in: 879deeda user: drh tags: trunk)
15:40
Show numstat-style statistics in the /ckout page as well. ... (check-in: cb4d1707 user: danield tags: trunk)
14:16
Avoid excess backslash excaping in text in the new robot-exception setup. ... (check-in: 5dc9f9b9 user: drh tags: trunk)
14:13
Add /reports to the default robot-restrict setting. ... (check-in: 12d871a0 user: stephan tags: trunk)
14:08
Add the robot-exception setting. ... (check-in: 86b6ef7f user: drh tags: trunk)
12:08
Sync with trunk. ... (check-in: 286a9006 user: florian tags: standard-cli-colors)
12:07
Sync with trunk. ... (check-in: a0377ebb user: florian tags: diff-word-wrap)
12:06
Sync with trunk. ... (check-in: 5ee83f28 user: florian tags: diff-keyboard-navigation)
12:04
Sync with trunk. ... (check-in: bab295db user: florian tags: timeline-keyboard-navigation)
12:02
Change [3710202914] to call the function to load the diff-related JS code even for blocked diffs. By default, the loader function is already a no-op if diffs are blocked, so the behavior intended by [3710202914] is retained. But other branches are patching the loader function because they rely on the JS code even if the diffs are hidden. ... (check-in: 171127fd user: florian tags: trunk)
10:51
Rearrange fields in the Robot Defense setup to make it easier to understand. ... (check-in: 58a48e3a user: drh tags: trunk)
2025-08-20
15:02
When appending the ssh signature, use a more direct function with the same result. ... (check-in: 5d040f1f user: danield tags: trunk)
00:03
Performance optimization in Th_RenderToBlob(). ... (check-in: b853b5d4 user: drh tags: trunk)
2025-08-19
22:55
Do not duplicate the "name" query parameter in the robot.c captcha. ... (check-in: 118540fa user: drh tags: trunk)
18:54
Improvements to robot-restrict. ... (check-in: 4e73f314 user: drh tags: trunk)
16:57
Create a new interface for checking to see if a tag exists in the robot-restrict setting. ... (check-in: 8784c600 user: drh tags: trunk)
16:35
Attempt to make recent robot defense improvements portable to IE. I do not have access to IE and hence cannot test this, so the changes are mostly a guess. Forum post e18c040d32. ... (check-in: 3d32a109 user: drh tags: trunk)
16:02
Do not show diffs on the /vinfo page unless we know that the client is not a robot. ... (check-in: 37102029 user: drh tags: trunk)
15:42
Refactor the code in robot.c to make interfaces available to other parts of the system. ... (check-in: 4fa618fa user: drh tags: trunk)
10:57
Check to see that CSS has been loaded before activating hyperlinks if the user is "nobody". ... (check-in: 3f6a6bdc user: drh tags: trunk)
10:37
Make "off" the preferred way to diable robot-restrict ... (check-in: db69c47a user: drh tags: trunk)
10:28
Documentation update: Make the robot-restrict setting "none" or "off" to disable all restrictions. ... (check-in: 26a9b033 user: drh tags: trunk)
2025-08-18
15:49
New setting "anon-cookie-lifespan" sets the life span of an anonymous login cookie. The default is 8 hours. Set to zero to disable anonymous login. ... (check-in: 7d2b47a7 user: drh tags: trunk)
11:45
Additional obfuscation of the javascript that runs to implement the anti-robot defense. ... (check-in: 4c4bce35 user: drh tags: trunk)
2025-08-17
19:38
Wrap the robot_restrict() JS check in an onload handler so that it won't run until the external resources (namely style.css) are loaded. ... (check-in: e5991efb user: stephan tags: trunk)
19:04
Improvements to robot detection in the robot_restrict() function. ... (check-in: e5b00c61 user: drh tags: trunk)
19:02
Obfuscation of the robot-test code. ... (Closed-Leaf check-in: 2fdd7ace user: drh tags: robotck-instant)
18:44
Merge the robot tests from trunk with the new tests from this branch so that *all* the tests are run. ... (check-in: 95a57c63 user: drh tags: robotck-instant)
18:33
Merge recent trunk enhancements into the robotck-instant branch. ... (check-in: dd11b563 user: drh tags: robotck-instant)
18:20
Use the UserAgent value from the HTTP request header, rather than the client IP address, as the additional factor in the anonymous login cookie hash, since some client are on networks where their IP address can shift frequently. ... (check-in: 06937668 user: drh tags: trunk)
17:47
Because this new check is too fast to see the progress indicator, make the final result label more explicit. ... (check-in: b6cf0c20 user: stephan tags: robotck-instant)
17:16
Make anonymous cookies valid for 8 hours. Include the client IP address as part of the cookie hash, but do not display the client IP address within the text of the cookie. ... (check-in: 68da4784 user: drh tags: trunk)
15:37
Move the z-level style into default.css, in case the adversaries read inlined STYLE tags (which now, in hindsight, seems more likely to me). Change the HTTP result code from robot_proofofwork() to a non-200 code, the hope being that the adversaries will stop on a non-200 code. ... (check-in: c7ad4363 user: stephan tags: robotck-instant)
15:00
Remove some dead code from /chat. ... (check-in: 144c5dbe user: stephan tags: trunk)
14:52
Correct a mis-calculation of fontSize for /chat attachments which use the Embed checkbox. ... (check-in: e3f0dcc3 user: stephan tags: trunk)
13:21
Add a comment explaining why document.body's z-level is explicitly set to 0. Remove some EOL whitespace. ... (check-in: 7c57a20e user: stephan tags: robotck-instant)
12:52
Add (stash rename) to the changelog. ... (check-in: c834adb6 user: stephan tags: trunk)
12:50
Add (stash rename) subcommand to change the label associated with a stash entry. ... (check-in: 1aaa6fc5 user: stephan tags: trunk)
12:29
Fix the previous checkin to actually compute the work value. This slows it down by a tiny fraction of a second but it's still effectively instant. This calculation can be moved up a level into the C code to turn this back into an instant operation, but leaving it on the client seems like a reasonable choice. ... (check-in: c27cfa9f user: stephan tags: robotck-instant)
12:10
An experiment in reducing the proof-of-work to a single operation. (This description is intentionally vague.) ... (check-in: b765e652 user: stephan tags: robotck-instant)
2025-08-16
16:48
Add a simple UI that allows any registered user (not "anonymous" or "nobody") to create access tokens. ... (check-in: 2a3d3031 user: drh tags: trunk)
15:54
Change the name of the robot-test cookie to fossil-client-ok. Decode that cookie's meaning on the /cookies page. ... (check-in: dc2232c6 user: drh tags: trunk)
14:44
Cache the results of calling robot_restrict() so that subsequent calls are very fast. ... (check-in: 1bdda5d0 user: drh tags: trunk)