Fossil SCM

permissive-manifest-parser setting is now marked as sensitive to keep an attacker from turning it on.

stephan 2020-08-18 17:25 sec2020-deadend
Commit 1e34705ed8a38f6810c8237d1323fd585e693f7f45d6f3f854cf341bb9cde658
1 file changed +1 -1
+1 -1
--- src/db.c
+++ src/db.c
@@ -3927,11 +3927,11 @@
39273927
** send the "pragma avoid-delta-manifests" statement in its reply,
39283928
** which will cause the client to avoid generating a delta
39293929
** manifest.
39303930
*/
39313931
/*
3932
-** SETTING: permissive-manifest-parser boolean default=off
3932
+** SETTING: permissive-manifest-parser boolean default=off sensitive
39333933
** By default, fossil fatally fails if any files are found in a
39343934
** manifest which have a name matching a checkout database name. In
39353935
** order to support repositories where such files were inadvertently
39363936
** checked in, this setting, when on, allows such files to be handled
39373937
** as if they were normal files. Only enable this if absolutely
39383938
--- src/db.c
+++ src/db.c
@@ -3927,11 +3927,11 @@
3927 ** send the "pragma avoid-delta-manifests" statement in its reply,
3928 ** which will cause the client to avoid generating a delta
3929 ** manifest.
3930 */
3931 /*
3932 ** SETTING: permissive-manifest-parser boolean default=off
3933 ** By default, fossil fatally fails if any files are found in a
3934 ** manifest which have a name matching a checkout database name. In
3935 ** order to support repositories where such files were inadvertently
3936 ** checked in, this setting, when on, allows such files to be handled
3937 ** as if they were normal files. Only enable this if absolutely
3938
--- src/db.c
+++ src/db.c
@@ -3927,11 +3927,11 @@
3927 ** send the "pragma avoid-delta-manifests" statement in its reply,
3928 ** which will cause the client to avoid generating a delta
3929 ** manifest.
3930 */
3931 /*
3932 ** SETTING: permissive-manifest-parser boolean default=off sensitive
3933 ** By default, fossil fatally fails if any files are found in a
3934 ** manifest which have a name matching a checkout database name. In
3935 ** order to support repositories where such files were inadvertently
3936 ** checked in, this setting, when on, allows such files to be handled
3937 ** as if they were normal files. Only enable this if absolutely
3938

Keyboard Shortcuts

Open search /
Next entry (timeline) j
Previous entry (timeline) k
Open focused entry Enter
Show this help ?
Toggle theme Top nav button