Fossil SCM

Added www/defcsp.md, which documents the default Content Security Policy applied by Fossil to the HTML pages it serves. Linked that into embeddeddoc.wik and customskin.md, which touched on this topic before but didn't go into much detail.

wyoung 2019-08-20 04:07 trunk
Commit 4e6d36d7d480a4701ca5c8275e45c3ec1cd615fceeeb2623403ac96a042817c3
+29 -19
--- www/customskin.md
+++ www/customskin.md
@@ -1,7 +1,6 @@
1
-Theming
2
-=======
1
+# Skinning the Fossil Web Interface
32
43
Every HTML page generated by Fossil has the following basic structure:
54
65
<blockquote><table border=1 cellpadding=10><tbody>
76
<tr><td style='background-color:lightblue;text-align:center;'>Header</td></tr>
@@ -37,17 +36,14 @@
3736
this material automatically unless it sees that you have provided your
3837
own HTML document header within the skin’s Header section.
3938
4039
This design lets most users get the benefit of Fossil’s automatic HTML
4140
document header, which takes care of quite a few different things for
42
-you, while still allowing you to override if at need. For example, you
43
-might not agree with Fossil’s default [Content Security Policy][csp]
44
-which gets set in a `<meta>` tag within this default document header, so
45
-you could provide your own, which would suppress that code.
41
+you, while still allowing you to [override if at need](#headfoot).
4642
4743
When overriding the default document header, you might want to use some
48
-of the TH1 variables documented below such as `$stylesheet_url`
44
+of the [TH1 variables documented below](#vars) such as `$stylesheet_url`
4945
to avoid hand-writing code that Fossil can generate for you.
5046
5147
The middle "content" section comprises the bulk of most pages and
5248
contains the actual Fossil-generated data
5349
that the user is interested in seeing. The text of this content
@@ -54,14 +50,12 @@
5450
section is not normally configurable. The content text can be styled
5551
using CSS, but it is otherwise fixed. Hence it is the header, the footer,
5652
and the CSS that determine the look of a repository.
5753
We call the bundle of built-in CSS, header, and footer a "skin".
5854
59
-[csp]: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
6055
61
-Built-in Skins
---------------
56
+## <a name="builtin"></a>Built-in Skins
6257
6358
Fossil comes with several built-in skins. The sources to these built-ins can
6459
be found in the Fossil source tree under the skins/ folder. The skins/
6560
folder contains a separate subfolder for each built-in skin, with each
6661
subfolders holding four files, "css.txt", "details.txt",
@@ -75,12 +69,12 @@
7569
line option can be used for the
7670
[fossil ui](../../../help?cmd=ui) or
7771
[fossil server](../../../help?cmd=server) commands to force that particular
7872
instance of Fossil to use the specified built-in skin.
7973
80
-Sharing Skins
--------------
74
+
75
+## <a name="sharing"></a>Sharing Skins
8176
8277
The skin of a repository is not part of the versioned state and does not
8378
"push" or "pull" like checked-in files. The skin is local to the
8479
repository. However, skins can be shared between repositories using
8580
the [fossil config](../../../help?cmd=configuration) command.
@@ -104,12 +98,12 @@
10498
necessary.
10599
106100
When cloning a repository, the skin of new repository is initialized to
107101
the skin of the repository from which it was cloned.
108102
109
-Header and Footer Processing
-----------------------------
103
+
104
+## <a name="headfoot"></a>Header and Footer Processing
110105
111106
The `header.txt` and `footer.txt` files of a skin are merely the HTML text
112107
of the header and footer, except that before being prepended and appended to
113108
the content, their text content is run through a
114109
[TH1 interpreter](./th1.md) that might adjust the text as follows:
@@ -120,11 +114,11 @@
120114
or to inhibit or enable the output of subsequent text.
121115
122116
* Text of the form "$NAME" or "$&lt;NAME&gt;" is replaced with
123117
the value of the TH1 variable NAME.
124118
125
-Above, we saw the first few lines of a typical header file:
119
+Above, we saw the first few lines of a typical Fossil skin header:
126120
127121
<div class="header">
128122
<div class="title"><h1>$<project_name></h1>$<title>/div>
129123
130124
After variables are substituted by TH1, that will look more like this:
@@ -136,17 +130,19 @@
136130
137131
The same TH1 interpreter is used for both the header and the footer
138132
and for all scripts contained within them both. Hence, any global
139133
TH1 variables that are set by the header are available to the footer.
140134
141
-As pointed out at the start of this document, Fossil provides the HTML
135
+Fossil provides the HTML
142136
document container tags `<html>`, `<head>`, and their inner content when
143
-your skin’s header and footer don’t include them.
137
+your skin’s header and footer don’t include them. This default header
138
+declares the repository’s Content Security Policy (CSP) which is well
139
+worth understanding, but since it is not strictly about skinning, we
140
+cover that in [a separate document](./defcsp.md).
144141
145142
146
-Customizing the ≡ Hamburger Menu
---------------------------------
143
+## <a name="menu"></a>Customizing the ≡ Hamburger Menu
147144
148145
The menu bar of the default skin has an entry to open a drop-down menu with
149146
additional navigation links, represented by the ≡ button (hence the name
150147
"hamburger menu"). The Javascript logic to open and close the hamburger menu
151148
when the button is clicked is contained in the optional Javascript part (js.txt)
@@ -200,12 +196,12 @@
200196
The custom `data-anim-ms` attribute can be added to the panel element to direct
201197
the Javascript logic to override the default menu animation duration of 400 ms.
202198
A faster animation duration of 80-200 ms may be preferred for smaller menus. The
203199
animation is disabled by setting the attribute to `"0"`.
204200
205
-TH1 Variables
--------------
201
+
202
+## <a name="vars"></a>TH1 Variables
206203
207204
Before expanding the TH1 within the header and footer, Fossil first
208205
initializes a number of TH1 variables to values that depend on
209206
repository settings and the specific page being generated.
210207
@@ -242,11 +238,18 @@
242238
Examples: "timeline", "doc/trunk/README.txt", "wiki".
243239
244240
* **csrf_token** - A token used to prevent cross-site request forgery.
245241
246242
* **default_csp** - The content to be used within the default header
247
- for the "Content-Security-Policy" meta tag.
243
+ for the "Content-Security-Policy" `<meta>` tag. You can use
244
+ [Fossil’s default CSP](./defcsp.md) from this variable in your
245
+ [own custom `<head>`](#headfoot). Alternately, you can override
246
+ the default CSP from the [`th1-setup` script](./th1-hooks.md),
247
+ which runs before TH1 processing happens during skin processing,
248
+ allowing you to set a custom CSP without recompiling Fossil or
249
+ providing a hand-written `<head>` section in the Header section
250
+ of a custom skin.
248251
249252
* **nonce** - The value of the cryptographic nonce for the request
250253
being processed.
251254
252255
* **release_version** - The release version of Fossil. Ex: "1.31"
@@ -275,12 +278,12 @@
275278
All of the above are variables in the sense that either the header or the
276279
footer is free to change or erase them. But they should probably be treated
277280
as constants. New predefined values are likely to be added in future
278281
releases of Fossil.
279282
280
-Suggested Skin Customization Procedure
---------------------------------------
283
+
284
+## <a name="procedure"></a>Suggested Skin Customization Procedure
281285
282286
Developers are free, of course, to develop new skins using any method they
283287
want, but the following is a technique that has worked well in the past and
284288
can serve as a starting point for future work:
285289
@@ -309,9 +312,9 @@
309312
4. Copy/paste the resulting css.txt, details.txt,
310313
header.txt, and footer.txt files
311314
into the CSS, details, header, and footer configuration screens
312315
under the Admin/Skins menu.
313316
314
-See Also
---------
317
+
318
+## See Also
315319
316320
* [Customizing the Timeline Graph](customgraph.md)
317321
318322
ADDED www/defcsp.md
--- www/customskin.md
+++ www/customskin.md
@@ -1,7 +1,6 @@
1 Theming
2 =======
3
4 Every HTML page generated by Fossil has the following basic structure:
5
6 <blockquote><table border=1 cellpadding=10><tbody>
7 <tr><td style='background-color:lightblue;text-align:center;'>Header</td></tr>
@@ -37,17 +36,14 @@
37 this material automatically unless it sees that you have provided your
38 own HTML document header within the skin’s Header section.
39
40 This design lets most users get the benefit of Fossil’s automatic HTML
41 document header, which takes care of quite a few different things for
42 you, while still allowing you to override if at need. For example, you
43 might not agree with Fossil’s default [Content Security Policy][csp]
44 which gets set in a `<meta>` tag within this default document header, so
45 you could provide your own, which would suppress that code.
46
47 When overriding the default document header, you might want to use some
48 of the TH1 variables documented below such as `$stylesheet_url`
49 to avoid hand-writing code that Fossil can generate for you.
50
51 The middle "content" section comprises the bulk of most pages and
52 contains the actual Fossil-generated data
53 that the user is interested in seeing. The text of this content
@@ -54,14 +50,12 @@
54 section is not normally configurable. The content text can be styled
55 using CSS, but it is otherwise fixed. Hence it is the header, the footer,
56 and the CSS that determine the look of a repository.
57 We call the bundle of built-in CSS, header, and footer a "skin".
58
59 [csp]: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
60
61 Built-in Skins
---------------
 
62
63 Fossil comes with several built-in skins. The sources to these built-ins can
64 be found in the Fossil source tree under the skins/ folder. The skins/
65 folder contains a separate subfolder for each built-in skin, with each
66 subfolders holding four files, "css.txt", "details.txt",
@@ -75,12 +69,12 @@
75 line option can be used for the
76 [fossil ui](../../../help?cmd=ui) or
77 [fossil server](../../../help?cmd=server) commands to force that particular
78 instance of Fossil to use the specified built-in skin.
79
80 Sharing Skins
--------------
 
 
81
82 The skin of a repository is not part of the versioned state and does not
83 "push" or "pull" like checked-in files. The skin is local to the
84 repository. However, skins can be shared between repositories using
85 the [fossil config](../../../help?cmd=configuration) command.
@@ -104,12 +98,12 @@
104 necessary.
105
106 When cloning a repository, the skin of new repository is initialized to
107 the skin of the repository from which it was cloned.
108
109 Header and Footer Processing
-----------------------------
 
 
110
111 The `header.txt` and `footer.txt` files of a skin are merely the HTML text
112 of the header and footer, except that before being prepended and appended to
113 the content, their text content is run through a
114 [TH1 interpreter](./th1.md) that might adjust the text as follows:
@@ -120,11 +114,11 @@
120 or to inhibit or enable the output of subsequent text.
121
122 * Text of the form "$NAME" or "$&lt;NAME&gt;" is replaced with
123 the value of the TH1 variable NAME.
124
125 Above, we saw the first few lines of a typical header file:
126
127 <div class="header">
128 <div class="title"><h1>$<project_name></h1>$<title>/div>
129
130 After variables are substituted by TH1, that will look more like this:
@@ -136,17 +130,19 @@
136
137 The same TH1 interpreter is used for both the header and the footer
138 and for all scripts contained within them both. Hence, any global
139 TH1 variables that are set by the header are available to the footer.
140
141 As pointed out at the start of this document, Fossil provides the HTML
142 document container tags `<html>`, `<head>`, and their inner content when
143 your skin’s header and footer don’t include them.
 
 
 
144
145
146 Customizing the ≡ Hamburger Menu
---------------------------------
 
147
148 The menu bar of the default skin has an entry to open a drop-down menu with
149 additional navigation links, represented by the ≡ button (hence the name
150 "hamburger menu"). The Javascript logic to open and close the hamburger menu
151 when the button is clicked is contained in the optional Javascript part (js.txt)
@@ -200,12 +196,12 @@
200 The custom `data-anim-ms` attribute can be added to the panel element to direct
201 the Javascript logic to override the default menu animation duration of 400 ms.
202 A faster animation duration of 80-200 ms may be preferred for smaller menus. The
203 animation is disabled by setting the attribute to `"0"`.
204
205 TH1 Variables
--------------
 
 
206
207 Before expanding the TH1 within the header and footer, Fossil first
208 initializes a number of TH1 variables to values that depend on
209 repository settings and the specific page being generated.
210
@@ -242,11 +238,18 @@
242 Examples: "timeline", "doc/trunk/README.txt", "wiki".
243
244 * **csrf_token** - A token used to prevent cross-site request forgery.
245
246 * **default_csp** - The content to be used within the default header
247 for the "Content-Security-Policy" meta tag.
 
 
 
 
 
 
 
248
249 * **nonce** - The value of the cryptographic nonce for the request
250 being processed.
251
252 * **release_version** - The release version of Fossil. Ex: "1.31"
@@ -275,12 +278,12 @@
275 All of the above are variables in the sense that either the header or the
276 footer is free to change or erase them. But they should probably be treated
277 as constants. New predefined values are likely to be added in future
278 releases of Fossil.
279
280 Suggested Skin Customization Procedure
---------------------------------------
 
 
281
282 Developers are free, of course, to develop new skins using any method they
283 want, but the following is a technique that has worked well in the past and
284 can serve as a starting point for future work:
285
@@ -309,9 +312,9 @@
309 4. Copy/paste the resulting css.txt, details.txt,
310 header.txt, and footer.txt files
311 into the CSS, details, header, and footer configuration screens
312 under the Admin/Skins menu.
313
314 See Also
---------
 
 
315
316 * [Customizing the Timeline Graph](customgraph.md)
317
318 DDED www/defcsp.md
--- www/customskin.md
+++ www/customskin.md
@@ -1,7 +1,6 @@
1 # Skinning the Fossil Web Interface
 
2
3 Every HTML page generated by Fossil has the following basic structure:
4
5 <blockquote><table border=1 cellpadding=10><tbody>
6 <tr><td style='background-color:lightblue;text-align:center;'>Header</td></tr>
@@ -37,17 +36,14 @@
36 this material automatically unless it sees that you have provided your
37 own HTML document header within the skin’s Header section.
38
39 This design lets most users get the benefit of Fossil’s automatic HTML
40 document header, which takes care of quite a few different things for
41 you, while still allowing you to [override if at need](#headfoot).
 
 
 
42
43 When overriding the default document header, you might want to use some
44 of the [TH1 variables documented below](#vars) such as `$stylesheet_url`
45 to avoid hand-writing code that Fossil can generate for you.
46
47 The middle "content" section comprises the bulk of most pages and
48 contains the actual Fossil-generated data
49 that the user is interested in seeing. The text of this content
@@ -54,14 +50,12 @@
50 section is not normally configurable. The content text can be styled
51 using CSS, but it is otherwise fixed. Hence it is the header, the footer,
52 and the CSS that determine the look of a repository.
53 We call the bundle of built-in CSS, header, and footer a "skin".
54
 
55
 
---------------
56 ## <a name="builtin"></a>Built-in Skins
57
58 Fossil comes with several built-in skins. The sources to these built-ins can
59 be found in the Fossil source tree under the skins/ folder. The skins/
60 folder contains a separate subfolder for each built-in skin, with each
61 subfolders holding four files, "css.txt", "details.txt",
@@ -75,12 +69,12 @@
69 line option can be used for the
70 [fossil ui](../../../help?cmd=ui) or
71 [fossil server](../../../help?cmd=server) commands to force that particular
72 instance of Fossil to use the specified built-in skin.
73
 
--------------
74
75 ## <a name="sharing"></a>Sharing Skins
76
77 The skin of a repository is not part of the versioned state and does not
78 "push" or "pull" like checked-in files. The skin is local to the
79 repository. However, skins can be shared between repositories using
80 the [fossil config](../../../help?cmd=configuration) command.
@@ -104,12 +98,12 @@
98 necessary.
99
100 When cloning a repository, the skin of new repository is initialized to
101 the skin of the repository from which it was cloned.
102
 
-----------------------------
103
104 ## <a name="headfoot"></a>Header and Footer Processing
105
106 The `header.txt` and `footer.txt` files of a skin are merely the HTML text
107 of the header and footer, except that before being prepended and appended to
108 the content, their text content is run through a
109 [TH1 interpreter](./th1.md) that might adjust the text as follows:
@@ -120,11 +114,11 @@
114 or to inhibit or enable the output of subsequent text.
115
116 * Text of the form "$NAME" or "$&lt;NAME&gt;" is replaced with
117 the value of the TH1 variable NAME.
118
119 Above, we saw the first few lines of a typical Fossil skin header:
120
121 <div class="header">
122 <div class="title"><h1>$<project_name></h1>$<title>/div>
123
124 After variables are substituted by TH1, that will look more like this:
@@ -136,17 +130,19 @@
130
131 The same TH1 interpreter is used for both the header and the footer
132 and for all scripts contained within them both. Hence, any global
133 TH1 variables that are set by the header are available to the footer.
134
135 Fossil provides the HTML
136 document container tags `<html>`, `<head>`, and their inner content when
137 your skin’s header and footer don’t include them. This default header
138 declares the repository’s Content Security Policy (CSP) which is well
139 worth understanding, but since it is not strictly about skinning, we
140 cover that in [a separate document](./defcsp.md).
141
142
 
---------------------------------
143 ## <a name="menu"></a>Customizing the ≡ Hamburger Menu
144
145 The menu bar of the default skin has an entry to open a drop-down menu with
146 additional navigation links, represented by the ≡ button (hence the name
147 "hamburger menu"). The Javascript logic to open and close the hamburger menu
148 when the button is clicked is contained in the optional Javascript part (js.txt)
@@ -200,12 +196,12 @@
196 The custom `data-anim-ms` attribute can be added to the panel element to direct
197 the Javascript logic to override the default menu animation duration of 400 ms.
198 A faster animation duration of 80-200 ms may be preferred for smaller menus. The
199 animation is disabled by setting the attribute to `"0"`.
200
 
--------------
201
202 ## <a name="vars"></a>TH1 Variables
203
204 Before expanding the TH1 within the header and footer, Fossil first
205 initializes a number of TH1 variables to values that depend on
206 repository settings and the specific page being generated.
207
@@ -242,11 +238,18 @@
238 Examples: "timeline", "doc/trunk/README.txt", "wiki".
239
240 * **csrf_token** - A token used to prevent cross-site request forgery.
241
242 * **default_csp** - The content to be used within the default header
243 for the "Content-Security-Policy" `<meta>` tag. You can use
244 [Fossil’s default CSP](./defcsp.md) from this variable in your
245 [own custom `<head>`](#headfoot). Alternately, you can override
246 the default CSP from the [`th1-setup` script](./th1-hooks.md),
247 which runs before TH1 processing happens during skin processing,
248 allowing you to set a custom CSP without recompiling Fossil or
249 providing a hand-written `<head>` section in the Header section
250 of a custom skin.
251
252 * **nonce** - The value of the cryptographic nonce for the request
253 being processed.
254
255 * **release_version** - The release version of Fossil. Ex: "1.31"
@@ -275,12 +278,12 @@
278 All of the above are variables in the sense that either the header or the
279 footer is free to change or erase them. But they should probably be treated
280 as constants. New predefined values are likely to be added in future
281 releases of Fossil.
282
 
---------------------------------------
283
284 ## <a name="procedure"></a>Suggested Skin Customization Procedure
285
286 Developers are free, of course, to develop new skins using any method they
287 want, but the following is a technique that has worked well in the past and
288 can serve as a starting point for future work:
289
@@ -309,9 +312,9 @@
312 4. Copy/paste the resulting css.txt, details.txt,
313 header.txt, and footer.txt files
314 into the CSS, details, header, and footer configuration screens
315 under the Admin/Skins menu.
316
 
---------
317
318 ## See Also
319
320 * [Customizing the Timeline Graph](customgraph.md)
321
322 DDED www/defcsp.md
--- a/www/defcsp.md
+++ b/www/defcsp.md
@@ -0,0 +1,11 @@
1
+javas=` attribute One of the most important things you have to know about the default
2
+[Fossil-provided `<head>` textheadfoot) is the
3
+[ute the
4
+matches the %s ][csp] (CSP) it applies to your repository’s web
5
+interface. The current version applies the f
6
+
7
+
8
+##Lm@NC,6E@iJ,H:(./customskin.md)9w@oa,Bl@ys,2k@1x5,3:
9
+
10
+
11
+1DQXgn;.wiki
--- a/www/defcsp.md
+++ b/www/defcsp.md
@@ -0,0 +1,11 @@
 
 
 
 
 
 
 
 
 
 
 
--- a/www/defcsp.md
+++ b/www/defcsp.md
@@ -0,0 +1,11 @@
1 javas=` attribute One of the most important things you have to know about the default
2 [Fossil-provided `<head>` textheadfoot) is the
3 [ute the
4 matches the %s ][csp] (CSP) it applies to your repository’s web
5 interface. The current version applies the f
6
7
8 ##Lm@NC,6E@iJ,H:(./customskin.md)9w@oa,Bl@ys,2k@1x5,3:
9
10
11 1DQXgn;.wiki
--- www/embeddeddoc.wiki
+++ www/embeddeddoc.wiki
@@ -93,10 +93,21 @@
9393
required for this to occur. The "data-title='...'" attribute is
9494
optional, but if it is present the text will become the title displayed
9595
in the Fossil header. An example of this can be seen in the text
9696
of the [/artifact/84b4b3d041d93a?txt=1 | Index Of Fossil Documentation]
9797
document.
98
+
99
+Beware that such HTML files render in the same browser security context
100
+as all other embedded documentation served from Fossil; they are not
101
+fully-independent web pages. One practical consequence of this is that
102
+embedded <tt>&lt;script&gt;</tt> tags will cause a
103
+[https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP | Content
104
+Security Policy] error in your browser with the default CSP as served by
105
+Fossil. See the sections on [./customskin.md#headfoot | Header and
106
+Footer Processing] and [./customskin.md#defcsp | The Default CSP] within
107
+the document on Fossil skinning.
108
+
98109
99110
<h2>Examples</h2>
100111
101112
This file that you are currently reading is an example of
102113
embedded documentation. The name of this file in the fossil
103114
--- www/embeddeddoc.wiki
+++ www/embeddeddoc.wiki
@@ -93,10 +93,21 @@
93 required for this to occur. The "data-title='...'" attribute is
94 optional, but if it is present the text will become the title displayed
95 in the Fossil header. An example of this can be seen in the text
96 of the [/artifact/84b4b3d041d93a?txt=1 | Index Of Fossil Documentation]
97 document.
 
 
 
 
 
 
 
 
 
 
 
98
99 <h2>Examples</h2>
100
101 This file that you are currently reading is an example of
102 embedded documentation. The name of this file in the fossil
103
--- www/embeddeddoc.wiki
+++ www/embeddeddoc.wiki
@@ -93,10 +93,21 @@
93 required for this to occur. The "data-title='...'" attribute is
94 optional, but if it is present the text will become the title displayed
95 in the Fossil header. An example of this can be seen in the text
96 of the [/artifact/84b4b3d041d93a?txt=1 | Index Of Fossil Documentation]
97 document.
98
99 Beware that such HTML files render in the same browser security context
100 as all other embedded documentation served from Fossil; they are not
101 fully-independent web pages. One practical consequence of this is that
102 embedded <tt>&lt;script&gt;</tt> tags will cause a
103 [https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP | Content
104 Security Policy] error in your browser with the default CSP as served by
105 Fossil. See the sections on [./customskin.md#headfoot | Header and
106 Footer Processing] and [./customskin.md#defcsp | The Default CSP] within
107 the document on Fossil skinning.
108
109
110 <h2>Examples</h2>
111
112 This file that you are currently reading is an example of
113 embedded documentation. The name of this file in the fossil
114
--- www/mkindex.tcl
+++ www/mkindex.tcl
@@ -30,10 +30,11 @@
3030
contribute.wiki {Contributing Code or Documentation To The Fossil Project}
3131
customgraph.md {Theming: Customizing the Timeline Graph}
3232
customskin.md {Theming: Customizing The Appearance of Web Pages}
3333
customskin.md {Custom Skins}
3434
custom_ticket.wiki {Customizing The Ticket System}
35
+ defcsp.md {The Default Content Security Policy}
3536
delta_encoder_algorithm.wiki {Fossil Delta Encoding Algorithm}
3637
delta_format.wiki {Fossil Delta Format}
3738
embeddeddoc.wiki {Embedded Project Documentation}
3839
encryptedrepos.wiki {How To Use Encrypted Repositories}
3940
env-opts.md {Environment Variables and Global Options}
4041
--- www/mkindex.tcl
+++ www/mkindex.tcl
@@ -30,10 +30,11 @@
30 contribute.wiki {Contributing Code or Documentation To The Fossil Project}
31 customgraph.md {Theming: Customizing the Timeline Graph}
32 customskin.md {Theming: Customizing The Appearance of Web Pages}
33 customskin.md {Custom Skins}
34 custom_ticket.wiki {Customizing The Ticket System}
 
35 delta_encoder_algorithm.wiki {Fossil Delta Encoding Algorithm}
36 delta_format.wiki {Fossil Delta Format}
37 embeddeddoc.wiki {Embedded Project Documentation}
38 encryptedrepos.wiki {How To Use Encrypted Repositories}
39 env-opts.md {Environment Variables and Global Options}
40
--- www/mkindex.tcl
+++ www/mkindex.tcl
@@ -30,10 +30,11 @@
30 contribute.wiki {Contributing Code or Documentation To The Fossil Project}
31 customgraph.md {Theming: Customizing the Timeline Graph}
32 customskin.md {Theming: Customizing The Appearance of Web Pages}
33 customskin.md {Custom Skins}
34 custom_ticket.wiki {Customizing The Ticket System}
35 defcsp.md {The Default Content Security Policy}
36 delta_encoder_algorithm.wiki {Fossil Delta Encoding Algorithm}
37 delta_format.wiki {Fossil Delta Format}
38 embeddeddoc.wiki {Embedded Project Documentation}
39 encryptedrepos.wiki {How To Use Encrypted Repositories}
40 env-opts.md {Environment Variables and Global Options}
41
--- www/permutedindex.html
+++ www/permutedindex.html
@@ -65,10 +65,11 @@
6565
<li><a href="build.wiki"><b>Compiling and Installing Fossil</b></a></li>
6666
<li><a href="concepts.wiki">Concepts &mdash; Fossil Core</a></li>
6767
<li><a href="cgi.wiki">Configuration Options &mdash; CGI Script</a></li>
6868
<li><a href="server.wiki">Configure A Fossil Server &mdash; How To</a></li>
6969
<li><a href="shunning.wiki">Content From Fossil &mdash; Shunning: Deleting</a></li>
70
+<li><a href="defcsp.md">Content Security Policy &mdash; The Default</a></li>
7071
<li><a href="contribute.wiki"><b>Contributing Code or Documentation To The Fossil Project</b></a></li>
7172
<li><a href="copyright-release.html"><b>Contributor License Agreement</b></a></li>
7273
<li><a href="whyusefossil.wiki">Control &mdash; Benefits Of Version</a></li>
7374
<li><a href="concepts.wiki">Core Concepts &mdash; Fossil</a></li>
7475
<li><a href="newrepo.wiki">Create A New Fossil Repository &mdash; How To</a></li>
@@ -77,10 +78,11 @@
7778
<li><a href="customskin.md"><b>Custom Skins</b></a></li>
7879
<li><a href="customskin.md">Customizing The Appearance of Web Pages &mdash; Theming:</a></li>
7980
<li><a href="custom_ticket.wiki"><b>Customizing The Ticket System</b></a></li>
8081
<li><a href="customgraph.md">Customizing the Timeline Graph &mdash; Theming:</a></li>
8182
<li><a href="tech_overview.wiki">Databases Used By Fossil &mdash; SQLite</a></li>
83
+<li><a href="defcsp.md">Default Content Security Policy &mdash; The</a></li>
8284
<li><a href="antibot.wiki"><b>Defense against Spiders and Bots</b></a></li>
8385
<li><a href="shunning.wiki">Deleting Content From Fossil &mdash; Shunning:</a></li>
8486
<li><a href="private.wiki">Deleting Private Branches &mdash; Creating, Syncing, and</a></li>
8587
<li><a href="delta_encoder_algorithm.wiki">Delta Encoding Algorithm &mdash; Fossil</a></li>
8688
<li><a href="delta_format.wiki">Delta Format &mdash; Fossil</a></li>
@@ -195,10 +197,11 @@
195197
<li><a href="customskin.md">Pages &mdash; Theming: Customizing The Appearance of Web</a></li>
196198
<li><a href="password.wiki"><b>Password Management And Authentication</b></a></li>
197199
<li><a href="globs.md">Patterns &mdash; File Name Glob</a></li>
198200
<li><a href="quotes.wiki">People Are Saying About Fossil, Git, and DVCSes in General &mdash; Quotes: What</a></li>
199201
<li><a href="stats.wiki"><b>Performance Statistics</b></a></li>
202
+<li><a href="defcsp.md">Policy &mdash; The Default Content Security</a></li>
200203
<li><a href="hashpolicy.wiki">Policy: Choosing Between SHA1 and SHA3-256 &mdash; Hash</a></li>
201204
<li><a href="grep.md">POSIX grep &mdash; Fossil grep vs</a></li>
202205
<li><a href="../test/release-checklist.wiki"><b>Pre-Release Testing Checklist</b></a></li>
203206
<li><a href="pop.wiki"><b>Principles Of Operation</b></a></li>
204207
<li><a href="private.wiki">Private Branches &mdash; Creating, Syncing, and Deleting</a></li>
@@ -226,10 +229,11 @@
226229
<li><a href="fiveminutes.wiki">Running in 5 Minutes as a Single User &mdash; Up and</a></li>
227230
<li><a href="quotes.wiki">Saying About Fossil, Git, and DVCSes in General &mdash; Quotes: What People Are</a></li>
228231
<li><a href="cgi.wiki">Script Configuration Options &mdash; CGI</a></li>
229232
<li><a href="th1.md">Scripting Language &mdash; The TH1</a></li>
230233
<li><a href="serverext.wiki">Scripts &mdash; Adding Extensions To A Fossil Server Using CGI</a></li>
234
+<li><a href="defcsp.md">Security Policy &mdash; The Default Content</a></li>
231235
<li><a href="selfcheck.wiki">Self Checks &mdash; Fossil Repository Integrity</a></li>
232236
<li><a href="selfhost.wiki">Self Hosting Repositories &mdash; Fossil</a></li>
233237
<li><a href="server.wiki">Server &mdash; How To Configure A Fossil</a></li>
234238
<li><a href="serverext.wiki">Server Extensions &mdash; CGI</a></li>
235239
<li><a href="serverext.wiki">Server Using CGI Scripts &mdash; Adding Extensions To A Fossil</a></li>
@@ -258,10 +262,11 @@
258262
<li><a href="tech_overview.wiki">Technical Overview Of The Design And Implementation Of Fossil &mdash; A</a></li>
259263
<li><a href="../test/release-checklist.wiki">Testing Checklist &mdash; Pre-Release</a></li>
260264
<li><a href="th1.md">TH1 Scripting Language &mdash; The</a></li>
261265
<li><a href="backoffice.md"><b>The "Backoffice" mechanism of Fossil</b></a></li>
262266
<li><a href="blame.wiki"><b>The Annotate/Blame Algorithm Of Fossil</b></a></li>
267
+<li><a href="defcsp.md"><b>The Default Content Security Policy</b></a></li>
263268
<li><a href="admin-v-setup.md"><b>The Differences Between the Setup and Admin User Capabilities</b></a></li>
264269
<li><a href="makefile.wiki"><b>The Fossil Build Process</b></a></li>
265270
<li><a href="sync.wiki"><b>The Fossil Sync Protocol</b></a></li>
266271
<li><a href="tickets.wiki"><b>The Fossil Ticket System</b></a></li>
267272
<li><a href="webui.wiki"><b>The Fossil Web Interface</b></a></li>
268273
--- www/permutedindex.html
+++ www/permutedindex.html
@@ -65,10 +65,11 @@
65 <li><a href="build.wiki"><b>Compiling and Installing Fossil</b></a></li>
66 <li><a href="concepts.wiki">Concepts &mdash; Fossil Core</a></li>
67 <li><a href="cgi.wiki">Configuration Options &mdash; CGI Script</a></li>
68 <li><a href="server.wiki">Configure A Fossil Server &mdash; How To</a></li>
69 <li><a href="shunning.wiki">Content From Fossil &mdash; Shunning: Deleting</a></li>
 
70 <li><a href="contribute.wiki"><b>Contributing Code or Documentation To The Fossil Project</b></a></li>
71 <li><a href="copyright-release.html"><b>Contributor License Agreement</b></a></li>
72 <li><a href="whyusefossil.wiki">Control &mdash; Benefits Of Version</a></li>
73 <li><a href="concepts.wiki">Core Concepts &mdash; Fossil</a></li>
74 <li><a href="newrepo.wiki">Create A New Fossil Repository &mdash; How To</a></li>
@@ -77,10 +78,11 @@
77 <li><a href="customskin.md"><b>Custom Skins</b></a></li>
78 <li><a href="customskin.md">Customizing The Appearance of Web Pages &mdash; Theming:</a></li>
79 <li><a href="custom_ticket.wiki"><b>Customizing The Ticket System</b></a></li>
80 <li><a href="customgraph.md">Customizing the Timeline Graph &mdash; Theming:</a></li>
81 <li><a href="tech_overview.wiki">Databases Used By Fossil &mdash; SQLite</a></li>
 
82 <li><a href="antibot.wiki"><b>Defense against Spiders and Bots</b></a></li>
83 <li><a href="shunning.wiki">Deleting Content From Fossil &mdash; Shunning:</a></li>
84 <li><a href="private.wiki">Deleting Private Branches &mdash; Creating, Syncing, and</a></li>
85 <li><a href="delta_encoder_algorithm.wiki">Delta Encoding Algorithm &mdash; Fossil</a></li>
86 <li><a href="delta_format.wiki">Delta Format &mdash; Fossil</a></li>
@@ -195,10 +197,11 @@
195 <li><a href="customskin.md">Pages &mdash; Theming: Customizing The Appearance of Web</a></li>
196 <li><a href="password.wiki"><b>Password Management And Authentication</b></a></li>
197 <li><a href="globs.md">Patterns &mdash; File Name Glob</a></li>
198 <li><a href="quotes.wiki">People Are Saying About Fossil, Git, and DVCSes in General &mdash; Quotes: What</a></li>
199 <li><a href="stats.wiki"><b>Performance Statistics</b></a></li>
 
200 <li><a href="hashpolicy.wiki">Policy: Choosing Between SHA1 and SHA3-256 &mdash; Hash</a></li>
201 <li><a href="grep.md">POSIX grep &mdash; Fossil grep vs</a></li>
202 <li><a href="../test/release-checklist.wiki"><b>Pre-Release Testing Checklist</b></a></li>
203 <li><a href="pop.wiki"><b>Principles Of Operation</b></a></li>
204 <li><a href="private.wiki">Private Branches &mdash; Creating, Syncing, and Deleting</a></li>
@@ -226,10 +229,11 @@
226 <li><a href="fiveminutes.wiki">Running in 5 Minutes as a Single User &mdash; Up and</a></li>
227 <li><a href="quotes.wiki">Saying About Fossil, Git, and DVCSes in General &mdash; Quotes: What People Are</a></li>
228 <li><a href="cgi.wiki">Script Configuration Options &mdash; CGI</a></li>
229 <li><a href="th1.md">Scripting Language &mdash; The TH1</a></li>
230 <li><a href="serverext.wiki">Scripts &mdash; Adding Extensions To A Fossil Server Using CGI</a></li>
 
231 <li><a href="selfcheck.wiki">Self Checks &mdash; Fossil Repository Integrity</a></li>
232 <li><a href="selfhost.wiki">Self Hosting Repositories &mdash; Fossil</a></li>
233 <li><a href="server.wiki">Server &mdash; How To Configure A Fossil</a></li>
234 <li><a href="serverext.wiki">Server Extensions &mdash; CGI</a></li>
235 <li><a href="serverext.wiki">Server Using CGI Scripts &mdash; Adding Extensions To A Fossil</a></li>
@@ -258,10 +262,11 @@
258 <li><a href="tech_overview.wiki">Technical Overview Of The Design And Implementation Of Fossil &mdash; A</a></li>
259 <li><a href="../test/release-checklist.wiki">Testing Checklist &mdash; Pre-Release</a></li>
260 <li><a href="th1.md">TH1 Scripting Language &mdash; The</a></li>
261 <li><a href="backoffice.md"><b>The "Backoffice" mechanism of Fossil</b></a></li>
262 <li><a href="blame.wiki"><b>The Annotate/Blame Algorithm Of Fossil</b></a></li>
 
263 <li><a href="admin-v-setup.md"><b>The Differences Between the Setup and Admin User Capabilities</b></a></li>
264 <li><a href="makefile.wiki"><b>The Fossil Build Process</b></a></li>
265 <li><a href="sync.wiki"><b>The Fossil Sync Protocol</b></a></li>
266 <li><a href="tickets.wiki"><b>The Fossil Ticket System</b></a></li>
267 <li><a href="webui.wiki"><b>The Fossil Web Interface</b></a></li>
268
--- www/permutedindex.html
+++ www/permutedindex.html
@@ -65,10 +65,11 @@
65 <li><a href="build.wiki"><b>Compiling and Installing Fossil</b></a></li>
66 <li><a href="concepts.wiki">Concepts &mdash; Fossil Core</a></li>
67 <li><a href="cgi.wiki">Configuration Options &mdash; CGI Script</a></li>
68 <li><a href="server.wiki">Configure A Fossil Server &mdash; How To</a></li>
69 <li><a href="shunning.wiki">Content From Fossil &mdash; Shunning: Deleting</a></li>
70 <li><a href="defcsp.md">Content Security Policy &mdash; The Default</a></li>
71 <li><a href="contribute.wiki"><b>Contributing Code or Documentation To The Fossil Project</b></a></li>
72 <li><a href="copyright-release.html"><b>Contributor License Agreement</b></a></li>
73 <li><a href="whyusefossil.wiki">Control &mdash; Benefits Of Version</a></li>
74 <li><a href="concepts.wiki">Core Concepts &mdash; Fossil</a></li>
75 <li><a href="newrepo.wiki">Create A New Fossil Repository &mdash; How To</a></li>
@@ -77,10 +78,11 @@
78 <li><a href="customskin.md"><b>Custom Skins</b></a></li>
79 <li><a href="customskin.md">Customizing The Appearance of Web Pages &mdash; Theming:</a></li>
80 <li><a href="custom_ticket.wiki"><b>Customizing The Ticket System</b></a></li>
81 <li><a href="customgraph.md">Customizing the Timeline Graph &mdash; Theming:</a></li>
82 <li><a href="tech_overview.wiki">Databases Used By Fossil &mdash; SQLite</a></li>
83 <li><a href="defcsp.md">Default Content Security Policy &mdash; The</a></li>
84 <li><a href="antibot.wiki"><b>Defense against Spiders and Bots</b></a></li>
85 <li><a href="shunning.wiki">Deleting Content From Fossil &mdash; Shunning:</a></li>
86 <li><a href="private.wiki">Deleting Private Branches &mdash; Creating, Syncing, and</a></li>
87 <li><a href="delta_encoder_algorithm.wiki">Delta Encoding Algorithm &mdash; Fossil</a></li>
88 <li><a href="delta_format.wiki">Delta Format &mdash; Fossil</a></li>
@@ -195,10 +197,11 @@
197 <li><a href="customskin.md">Pages &mdash; Theming: Customizing The Appearance of Web</a></li>
198 <li><a href="password.wiki"><b>Password Management And Authentication</b></a></li>
199 <li><a href="globs.md">Patterns &mdash; File Name Glob</a></li>
200 <li><a href="quotes.wiki">People Are Saying About Fossil, Git, and DVCSes in General &mdash; Quotes: What</a></li>
201 <li><a href="stats.wiki"><b>Performance Statistics</b></a></li>
202 <li><a href="defcsp.md">Policy &mdash; The Default Content Security</a></li>
203 <li><a href="hashpolicy.wiki">Policy: Choosing Between SHA1 and SHA3-256 &mdash; Hash</a></li>
204 <li><a href="grep.md">POSIX grep &mdash; Fossil grep vs</a></li>
205 <li><a href="../test/release-checklist.wiki"><b>Pre-Release Testing Checklist</b></a></li>
206 <li><a href="pop.wiki"><b>Principles Of Operation</b></a></li>
207 <li><a href="private.wiki">Private Branches &mdash; Creating, Syncing, and Deleting</a></li>
@@ -226,10 +229,11 @@
229 <li><a href="fiveminutes.wiki">Running in 5 Minutes as a Single User &mdash; Up and</a></li>
230 <li><a href="quotes.wiki">Saying About Fossil, Git, and DVCSes in General &mdash; Quotes: What People Are</a></li>
231 <li><a href="cgi.wiki">Script Configuration Options &mdash; CGI</a></li>
232 <li><a href="th1.md">Scripting Language &mdash; The TH1</a></li>
233 <li><a href="serverext.wiki">Scripts &mdash; Adding Extensions To A Fossil Server Using CGI</a></li>
234 <li><a href="defcsp.md">Security Policy &mdash; The Default Content</a></li>
235 <li><a href="selfcheck.wiki">Self Checks &mdash; Fossil Repository Integrity</a></li>
236 <li><a href="selfhost.wiki">Self Hosting Repositories &mdash; Fossil</a></li>
237 <li><a href="server.wiki">Server &mdash; How To Configure A Fossil</a></li>
238 <li><a href="serverext.wiki">Server Extensions &mdash; CGI</a></li>
239 <li><a href="serverext.wiki">Server Using CGI Scripts &mdash; Adding Extensions To A Fossil</a></li>
@@ -258,10 +262,11 @@
262 <li><a href="tech_overview.wiki">Technical Overview Of The Design And Implementation Of Fossil &mdash; A</a></li>
263 <li><a href="../test/release-checklist.wiki">Testing Checklist &mdash; Pre-Release</a></li>
264 <li><a href="th1.md">TH1 Scripting Language &mdash; The</a></li>
265 <li><a href="backoffice.md"><b>The "Backoffice" mechanism of Fossil</b></a></li>
266 <li><a href="blame.wiki"><b>The Annotate/Blame Algorithm Of Fossil</b></a></li>
267 <li><a href="defcsp.md"><b>The Default Content Security Policy</b></a></li>
268 <li><a href="admin-v-setup.md"><b>The Differences Between the Setup and Admin User Capabilities</b></a></li>
269 <li><a href="makefile.wiki"><b>The Fossil Build Process</b></a></li>
270 <li><a href="sync.wiki"><b>The Fossil Sync Protocol</b></a></li>
271 <li><a href="tickets.wiki"><b>The Fossil Ticket System</b></a></li>
272 <li><a href="webui.wiki"><b>The Fossil Web Interface</b></a></li>
273

Keyboard Shortcuts

Open search /
Next entry (timeline) j
Previous entry (timeline) k
Open focused entry Enter
Show this help ?
Toggle theme Top nav button