Artifact bacad12d4be7f98238d66f11f4da1a86d9ba6bdf3ff187b6e99dacc8dac95a08:
- File
internal/manifest/manifest.go
-
2026-10-25 21:08:25
— part of check-in
[2237a3781a]
on branch feat/carried-uuid-default-login
— fix: validate carried hashes and check FOSSIL_USER first
A carried file outside a sparse store's cone skips the held check, so any caller text of 40 bytes or more reached the F card verbatim, including a newline that writes a card of its own into the check-in. checkCarried now refuses a UUID that is not a lowercase SHA1 or SHA3-256 hash, which covers FileToCommit.UUID and the sparse checkout path alike (tracked in #486).
The default login follows fossil's db_create_default_users, which checks FOSSIL_USER before USER, LOGNAME and USERNAME (tracked in #487). (user: [email protected], size: 26814) [annotate] [blame] [check-ins using]
-
2026-10-25 22:23:31
— part of check-in
[d0abc1b3fa]
on branch main
— Merge pull request #494 from danmestas/feat/carried-uuid-default-login
feat(commit): carry files by UUID; fix Create's default login (user: [email protected], size: 26814) [annotate] [blame] [check-ins using]
-
2026-10-25 21:08:25
— part of check-in
[2237a3781a]
on branch feat/carried-uuid-default-login
— fix: validate carried hashes and check FOSSIL_USER first