Re: [fossil-users] Unshun: "CSRF attempt" error

2013-07-30 Thread Isaac Jurado
Replying Isaac Jurado: > > Index: src/info.c > == > --- src/info.c > +++ src/info.c > @@ -1427,11 +1427,11 @@ >if( !g.perm.Read ){ login_needed(); return; } >if( rid==0 ) fossil_redirect_home(); >if( g.perm.Admin ){ >

Re: [fossil-users] Unshun: "CSRF attempt" error

2013-07-29 Thread Isaac Jurado
On Sun, Jul 28, 2013 at 9:47 PM, Marc Simpson wrote: > It seems that unshunning is currently broken. To reproduce: > > (1) Create a test repository, > > $ fsl version > This is fossil version 1.26 [a60b008f1a] 2013-07-26 15:46:01 UTC > $ fsl new tmp.fsl > $ mkdir tmp; cd tmp > $ fsl open

Re: [fossil-users] Unshun: "CSRF attempt" error

2013-07-29 Thread Marc Simpson
On Mon, Jul 29, 2013 at 3:03 PM, Warren Young wrote: > On 7/28/2013 13:47, Marc Simpson wrote: >> >> >> Output: "Cross-site request forgery attempt". > > > That's a browser-specific feature, not something Fossil does. It may be > that Fossil could work differently to avoid triggering this browser

Re: [fossil-users] Unshun: "CSRF attempt" error

2013-07-29 Thread Isaac Jurado
On Mon, Jul 29, 2013 at 4:03 PM, Warren Young wrote: > On 7/28/2013 13:47, Marc Simpson wrote: >> >> >> Output: "Cross-site request forgery attempt". > > > That's a browser-specific feature, not something Fossil does. It may > be that Fossil could work differently to avoid triggering this browser

Re: [fossil-users] Unshun: "CSRF attempt" error

2013-07-29 Thread Warren Young
On 7/28/2013 13:47, Marc Simpson wrote: Output: "Cross-site request forgery attempt". That's a browser-specific feature, not something Fossil does. It may be that Fossil could work differently to avoid triggering this browser security feature, but ultimately it's a false positive. What br

[fossil-users] Unshun: "CSRF attempt" error

2013-07-28 Thread Marc Simpson
It seems that unshunning is currently broken. To reproduce: (1) Create a test repository, $ fsl version This is fossil version 1.26 [a60b008f1a] 2013-07-26 15:46:01 UTC $ fsl new tmp.fsl $ mkdir tmp; cd tmp $ fsl open ../tmp.fsl $ touch a $ fsl add a; fsl commit -m a a $ fsl ui (