Fossil

Changes On Branch sec2020-config-protection
Login

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Changes In Branch sec2020-config-protection Excluding Merge-Ins

This is equivalent to a diff from fb41384045 to aa4c3afc52

2020-08-17
20:03
Identify security-sensitive settings. check-in: 3bccd7fff2 user: drh tags: sec2020
17:34
The allow-symlinks setting is no longer versionable and is off by default. The allow-symlinks setting no longer propagates with a clone. The help text for allow-symlinks discourages its use. There is a new --symlink flag on "fossil open" to permit the use of symlinks on an open, for the adventurous. Ticket [f9831fdef1d4edcc]. check-in: ff98dd5af6 user: drh tags: sec2020
15:11
Identify security-sensitive settings. Closed-Leaf check-in: aa4c3afc52 user: drh tags: sec2020-config-protection
14:09
Set an authorizer when running the ticket-table SQL. Ticket [56b82836ffba9952]. check-in: fb41384045 user: drh tags: sec2020
09:16
Prohibit redirects from HTTP or HTTPS over to SSH or FILE. Fix for ticket [61613b0a9cf843b6]. check-in: 253dbd15e2 user: drh tags: sec2020

Changes to src/alerts.c.

Changes to src/db.c.

Changes to src/mkindex.c.