Wapp

Timeline
Login

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

171 check-ins using file examples/env.tcl version 4e5dbf4cae

2024-11-22
16:04
Improved error message when unauthorized characters are used in the request URI. (Leaf check-in: 3b1ce7c023 user: drh tags: trunk)
2024-11-18
14:47
If there are duplicate query parameters, the value becomes a list that is formed from teh values of the duplicates. Forum post 5eb29da65a. (Leaf check-in: e431ca0d00 user: drh tags: duplicate-parameters)
2024-11-09
12:41
Fix to the "clean" target on the MacOS makefile (check-in: 44975d66a9 user: drh tags: trunk)
12:34
Add a makefile for windows. Improvements, including better comments, in existing makefiles. (check-in: b7abbe4090 user: drh tags: trunk)
2024-11-07
19:34
Improved documentation of substitution operators. Documentation for the wapp-crash-handler interface. (check-in: f83e99d413 user: drh tags: trunk)
13:42
Change the wapp-crash-handler interface so that it takes no arguments. (check-in: e5fa3551e4 user: drh tags: trunk)
2024-11-06
17:44
Updates to the MacOS makefile. (check-in: 03f1783d7e user: drh tags: trunk)
17:09
If a command named "wapp-crash-handler" exists and an application error occurs, invoke the wapp-crash-handler command to generate the error message. (check-in: f7b5b7566a user: drh tags: trunk)
16:24
Show both the SQLite version number and the TCL version number with the -v option to wapptclsh. (check-in: 719ed9a20d user: drh tags: trunk)
2024-10-18
16:07
Update the built-in SQLite to the latest 3.47.0 beta. (check-in: ba52964f32 user: drh tags: trunk)
2024-10-14
11:16
Do not require CRLF endings from clients. (check-in: 2b091c8428 user: drh tags: trunk)
2024-10-13
19:20
The line-ending is always a bare U+000a character only. Wapp no longer sends CRLF line endings. (Leaf check-in: 293f95b663 user: drh tags: omit-cr)
2024-09-29
22:40
Fix is so that it runs with Tcl9. (check-in: 199a1a71c1 user: drh tags: trunk)
22:03
Update the built-in SQLite to the latest 3.47.0 alpha. (check-in: 0819ed51b3 user: drh tags: trunk)
2024-05-23
14:28
Update the built-in SQLite to the 3.46.0 release (check-in: 5e67d066e5 user: drh tags: trunk)
2024-05-21
13:55
Update the built-in SQLite to the first 3.46.0 release candidate, for testing. (check-in: c22bfb6b90 user: drh tags: trunk)
2024-05-19
22:12
Improvements to the url-shortener script. (check-in: cf3373ebee user: drh tags: trunk)
22:08
Fix the wapp-content-security-policy command so that it allows newline characters in the security policy input. These are removed before the security policy is added to the header. (check-in: cdac0cdb04 user: drh tags: trunk)
20:46
Updates and fixes to the url-shortener.tcl demo (check-in: e74cb059e3 user: drh tags: trunk)
20:15
First prototype of a URL shortener script. (check-in: 3e71cc718c user: drh tags: trunk)
2024-04-14
19:36
Update the built-in SQLite to the latest 3.46.0 alpha version. (check-in: 3dfe5da86a user: drh tags: trunk)
2024-01-30
18:04
Update the built-in SQLite to version 3.45.1 (check-in: 796aa7e55a user: drh tags: trunk)
2024-01-12
20:40
Update the built-in SQLite to the latest 3.45.0 beta. (check-in: 3d8d5c0fda user: drh tags: trunk)
2023-10-24
13:35
Update the built-in SQLite to the first 3.44.0 beta. (check-in: 830ad9a734 user: drh tags: trunk)
2023-08-18
19:43
Update the built-in SQLite to the latest 3.43.0 beta. (check-in: d490150531 user: drh tags: trunk)
2023-05-05
14:43
Update the built-in SQLite to the most recent 3.42.0 beta, for testing. (check-in: 9d3368116c user: drh tags: trunk)
2023-02-18
15:59
Update the built-in SQLite implementation to the latest 3.41.0 beta. (check-in: cef7dee326 user: drh tags: trunk)
2022-11-16
19:15
Update the built-in SQLite to the official version 3.40.0 release. (check-in: 6f5b05852e user: drh tags: trunk)
2022-11-10
11:44
Ignore stderr returns from xdg-open, as suggested by forum post 07078234d6. (check-in: 253fa3bcea user: drh tags: trunk)
2022-11-08
14:39
Update the built-in SQLite to the latest 3.40.0 beta. (check-in: f4a6f71da6 user: drh tags: trunk)
2022-09-30
12:29
Update the built-in SQLite to the latest 3.40.0 alpha version that includes all of the fixes of version 3.39.4. (check-in: be1f948a5c user: drh tags: trunk)
12:28
Correction to the documentation of the "wapp" command. (check-in: 4cc307273e user: drh tags: trunk)
2022-08-23
12:50
Update the built-in SQLite to the latest 3.40.0 alpha version. (check-in: f44b8326fc user: drh tags: trunk)
2022-08-01
10:21
Remove application code that was accidentally pasted into commands.md. Forum post 73a0daf2d9. (check-in: a75c921e06 user: drh tags: trunk)
2022-07-28
12:56
Update the built-in SQLite to the latest 3.40.0 alpha. (check-in: 6bc7d7957f user: drh tags: trunk)
12:41
Fix the wapp-redirect command so that (1) it also does a wapp-reset and (2) so that it uses reply code 303 instead of 307, thus making it usable for redirect-after-POST. (check-in: f48c405b79 user: drh tags: trunk)
12:24
Add the -debug option that causes reply content to go uncompressed. (check-in: e89db24eca user: drh tags: trunk)
2022-07-27
20:46
Fix documentation for the wapp-param-list command. (check-in: d739a6767c user: drh tags: trunk)
2022-02-13
19:39
Adjust the REQUEST_URI query parameter such that it includes the QUERY_STRING if any. In other words, REQUEST_URI should be the second field of the first line of the original HTTP request. This is how Apache and Nginx both work. (check-in: 3028f8c9ea user: drh tags: trunk)
2021-11-26
12:27
Update the built-in SQLite to the latest 3.37.0 beta. (check-in: 66bdd66cee user: drh tags: trunk)
12:23
Require that all POST parameters have lower-case alphanumeric names. Ignore any POST parameter that have upper-case letters or special characters in their names. See forum post 5220ee9ac0. (check-in: 27c4c3a75e user: drh tags: trunk)
2021-09-20
12:10
Enhance the wapp-reply-code command so that if given the argument of just "ABORT" Wapp will drop the TCP/IP connection without sending any reply at all. (check-in: a8fb6ca1fd user: drh tags: trunk)
12:10
Update the documentation to describe the new capabilities of wapp-reply-code. (Leaf check-in: f4a169b8db user: drh tags: abort-request)
2021-09-15
12:04
In this branch is a proposed patch whereby if the page handler calls "wapp-reply-code ABORT" then the request is cancelled and the TCP/IP connection is closed without sending any reply at all. (check-in: a757b342da user: drh tags: abort-request)
2021-06-18
13:33
Further rebustness in the %qp and %url substitutions. This is a correction to the previous check-in. (check-in: d776a1b60b user: drh tags: trunk)
13:09
Fix a problem with backslashes in the %qp() and %url() encoders. See https://sqlite.org/forum/forumpost/8fb639b5ad for the original report. (check-in: edd8b4f267 user: drh tags: trunk)
13:06
Update the built-in SQLite to 3.36.0rc1 (check-in: 94e52efaf6 user: drh tags: trunk)
2021-06-11
18:08
Update the usageexample.md document as the skin-list for Fossil no longer uses Wapp - that feature having been added as a Fossil built-in. (check-in: ea43846ecc user: drh tags: trunk)
2020-12-12
15:34
Add "Download" instructions to the homepage. (check-in: f9f5703a2c user: drh tags: trunk)
2020-10-08
13:02
Add the wapp-before-reply-hook proc. (check-in: f909925b48 user: drh tags: trunk)
2020-10-07
18:24
Add the capture.tcl test script. (check-in: 00f66ee5c9 user: drh tags: trunk)
2020-10-02
19:45
The wapptclsh executable responds to -v and --help. (check-in: 127a98314b user: drh tags: trunk)
2020-08-27
18:59
Update the built-in SQLite source code to version 3.33.0. (check-in: 41c7146764 user: drh tags: trunk)
14:53
Fix typo on the index page. (check-in: cdd4b624b9 user: drh tags: trunk)
2020-06-09
18:18
To the homepage, add a link to Oleg's extensions on GitHub. (check-in: 6fb098a2cd user: drh tags: trunk)
16:07
Update the built-in tclsqlite3.c file to the latest SQLite release. (check-in: 93e9458e99 user: drh tags: trunk)
2020-02-28
21:30
Add the external content demo script. (check-in: bd84938961 user: drh tags: trunk)
2019-10-15
14:54
Fix documentation typos. (check-in: 04b1d555cf user: drh tags: trunk)
2019-08-01
23:40
Adjust the makefile to use SQLITE_ENABLE_DESERIALIZE. (check-in: 6b66ed109d user: drh tags: trunk)
16:46
Load all environment variables that start with an upper-case ASCII letter as wapp-param values in CGI mode, rather than only loading selected variables. (check-in: 68331516e9 user: drh tags: trunk)
2019-07-31
14:30
Fix to [80f25418a1c32b8d] so that it works as CGI again. Also omit a parameter to wappInt-handle-request that is no longer used. (check-in: 44f07d8804 user: drh tags: trunk)
14:24
If the $argv0 variable is not set, use "/" for SCRIPT_FILENAME and DOCUMENT_ROOT. Ticket [1d0112d75bfbffc8]. (check-in: d52654e48f user: drh tags: trunk)
2019-07-30
23:12
Serialize the evaluation of the wappInt-handle-request proc. Fix for ticket [207094dd9de1343a] (check-in: 80f25418a1 user: drh tags: trunk)
17:47
More details in the explanation of how %-subsitutions work. (check-in: 568d7c208d user: drh tags: trunk)
15:35
Documentation updates. No changes to code. (check-in: c366208c59 user: drh tags: trunk)
15:34
Use "info command" instead of "info proc". Ticket [88807f83a6d9ddfd] (check-in: 359e3e19e9 user: drh tags: trunk)
2019-07-29
19:51
Documentation updates. No changes to code. (Leaf check-in: 255f9ed52a user: drh tags: tcltls)
2019-07-22
12:49
Add support for building wapptclsh with TclTLS. (check-in: dd273e0756 user: drh tags: tcltls)
2019-06-13
14:24
Add a link to the "Simple Live Demos" page to the README.md file. (check-in: 4d00e13e65 user: drh tags: trunk)
2019-04-30
16:56
Add the wapptest.tcl script from SQLite to the list of real-world usage examples. (check-in: b25a28b219 user: drh tags: trunk)
2019-04-23
19:52
Improvements to the tableajax01.tcl example. (check-in: ab89ab225b user: drh tags: trunk)
19:35
Add a "self" page to the fileupload.tcl demo. (check-in: cdd099b81e user: drh tags: trunk)
18:04
Fix a typo in the quickref.md document. (check-in: 713d5e77fc user: drh tags: trunk)
2019-04-15
19:00
Update the built-in SQLite to the 3.28.0 beta. (check-in: 482776f0ef user: drh tags: trunk)
2019-04-10
15:22
Improved JSON string literal encoding. (check-in: 4b187296d9 user: drh tags: trunk)
2019-04-09
13:11
Update the built-in SQLite to the latest 3.28.0 alpha. (check-in: 58675822f3 user: drh tags: trunk)
2019-04-08
20:14
For the %string() substitution, encode newlines and carriage returns using backslash escapes. (check-in: 6385090072 user: drh tags: trunk)
2019-04-01
01:57
Documentation improvements. (check-in: 38fa4334e3 user: drh tags: trunk)
01:31
Fix error in the first example of the "intro.md" page. (check-in: 83e002a08c user: drh tags: trunk)
00:53
Improved SCGI security: (1) The --scgi option only listens on IP address 127.0.0.1. The new --remote-scgi option must be used if the webserver is on a different machine. (2) The new --fromip option can be used to restrict incoming requests to a particular IP address. (3) In SCGI mode, the new parameter "SERVER_ADDR" contains the IP address of the webserver that originated the SCGI request. (check-in: fb5eafae32 user: drh tags: trunk)
2019-03-08
00:08
Add the forgotten helloworld.md documentation file. (check-in: 5f79eb875f user: drh tags: trunk)
2019-03-07
14:49
More documentation improvements. (check-in: 984d973c34 user: drh tags: trunk)
14:37
Further documentation refinements. (check-in: 271766c541 user: drh tags: trunk)
13:34
Documentation updates: improvements to the description of URL mapping and CGI variables. (check-in: 2eac47dda7 user: drh tags: trunk)
2019-03-06
23:12
More documentation tweaks. (check-in: 7be9077b84 user: drh tags: trunk)
22:49
Documentation tweaks. (check-in: ced8768917 user: drh tags: trunk)
20:47
Use the -command argument to regexp to provide wapp-subst and wapp-trim that are fast and that avoid doing command substitution outside of quoted regions. (check-in: df36e56f70 user: drh tags: trunk)
19:43
Update the documentation on wapp-subst to acknowledge that command substitution does occur outside of quoted regions. (check-in: 72cf27176a user: drh tags: trunk)
19:32
Alternative implementation of wapp-subst that does not allow command substitution within unquoted sections. (Leaf check-in: 627a5a8bbc user: drh tags: new-subst-algorithm)
17:44
Update the fileupload.tcl example so that uploaded images are shown in-line. This demonstrates how to use the TCL "binary encode" command to generate base64 from the raw image content and how to modify content-security-policy to allow "data:" sources for images. (check-in: af9968656c user: drh tags: trunk)
2019-03-04
19:18
Fix the multipart/form-data parser so that it can accept none-file uploads. Add the "fileupload.tcl" example. (check-in: cfa2467c17 user: drh tags: trunk)
2019-02-16
12:07
Minor updates to the documentation. (check-in: ca3221ef4e user: drh tags: trunk)
00:26
Add the -nowait option to the wapp-start proc. (check-in: 102ae00863 user: drh tags: trunk)
2019-02-05
23:32
Update the built-in tclsqlite3.c to the latest 3.27.0 beta. (check-in: 52cd62c2ac user: drh tags: trunk)
2018-12-01
13:24
Update the built-in tclsqlite3.c file to version 3.26.0 final. (check-in: d7e3ba32d0 user: drh tags: trunk)
2018-11-27
17:27
Update the built-in SQLite to the lastest 3.26.0 beta for testing. (check-in: 6a4d54bab7 user: drh tags: trunk)
2018-08-31
15:01
Add the mediaquery.tcl example script. (check-in: c736164111 user: drh tags: trunk)
01:10
Fix the doclist.html document so that it works for non-root repositories. (check-in: f7863d2470 user: drh tags: trunk)
00:34
Fix a bad hyperlink on the sitemap.md page. (check-in: 9afa5209e2 user: drh tags: trunk)
00:33
Add the copyright.md document. (check-in: 7bd900c058 user: drh tags: trunk)
00:13
Add the sitemap.md and doclist.html documents. (check-in: fbe42f35ca user: drh tags: trunk)
2018-08-06
11:51
Typo fix on the intro.md documentation page. (check-in: 766f64396a user: drh tags: trunk)
11:48
Avoid an extra \n at the end of the content in an CGI reply. Fix suggested by Gerome Fournier (check-in: f914bf8729 user: drh tags: trunk)
2018-05-31
19:57
Fix a comment typo. (check-in: 6fdf62dd60 user: drh tags: trunk)
2018-05-30
17:01
Update the built-in SQLite to the 3.24.0 beta. (check-in: 6036d4fc11 user: drh tags: trunk)
2018-05-21
15:25
Add the filelist.tcl example script. (check-in: fba858d541 user: drh tags: trunk)
2018-05-08
01:12
Fix a typo in the documentation. (check-in: 123ddf6cef user: drh tags: trunk)
2018-05-01
21:03
Add a "package require Tcl 8.6", suggested by AKU. (check-in: 9ca390e69f user: drh tags: trunk)
2018-03-30
12:25
Fix a typo in the compiling.md document. (check-in: c4e1e20b3a user: drh tags: trunk)
12:23
Use site-absolute URLs on the README.md file. (check-in: c555d600c0 user: drh tags: trunk)
11:19
Fix typo in the security.md page. (check-in: f32ee075ea user: drh tags: trunk)
2018-03-29
15:32
Update the security page to talk about the fact that parameter names must not contain special characters. (check-in: 8cec7dcae8 user: drh tags: trunk)
2018-03-28
20:25
Update the built-in SQLite to the first 3.23.0 beta. (check-in: 127706d944 user: drh tags: trunk)
2018-03-09
17:49
Improve %string() to escape < so that </script> does not cause problems in embedded javascript. Improve %html() to escape " and \ to avoid problems with HTML used inside a javascript string. (check-in: 1e5ec777a7 user: drh tags: trunk)
2018-03-02
14:02
Add the download.md document. (check-in: 88695e2d91 user: drh tags: trunk)
2018-02-27
04:05
Fix typos in the security.md document. (check-in: 3d9bec254b user: drh tags: trunk)
2018-02-19
12:32
Attempt to reimplement wapp-subst and wapp-trim using the -command option to regsub. This prevents bracket-command evaluatation in unsubstituted script, but it does not handle backslash escapes quite right. (Closed-Leaf check-in: 9352328572 user: drh tags: regsub-command)
2018-02-18
23:45
Allow "%html%(...)%" as an alternative to "%html(...)" for use in cases where the "..." contains one or more ")" characters. (check-in: a3a740ad51 user: drh tags: trunk)
2018-02-16
19:24
In "local" and "server" modes, if a TCL error occurs in the page processing routine, write that error onto standard output in addition to sending it back as the reply to request. (check-in: 99b13e374c user: drh tags: trunk)
2018-02-14
01:56
In the formajax02.tcl example, change the name of the AJAX accept procedure to "acceptajax" which makes more sense than the former name of "acceptjson". (check-in: d5adad95cd user: drh tags: trunk)
01:52
In the formajax02.tcl example, use the encodeURIComponent() javascript function instead of escape() so that the "+" character is correctly escaped. Fix for ticket [a38160c72116b1ba04c] (check-in: 9580d1fedb user: drh tags: trunk)
2018-02-10
20:21
Add an edit function to the shopping list application. (check-in: 43323e55a9 user: drh tags: trunk)
2018-02-08
12:31
More improvements to test01.tcl. (check-in: cea1360863 user: drh tags: trunk)
12:15
Typos from Andreas. Added the file-upload test to test01.tcl. (check-in: e17c170f16 user: drh tags: trunk)
04:42
Fix minor problems with the two self-scripts. (check-in: b25f6825c5 user: drh tags: trunk)
02:17
Add she-bangs to the self.tcl and self2.tcl examples. (check-in: 654ca1127b user: drh tags: trunk)
02:07
Add the self2.tcl example script (check-in: 0afcafe89f user: drh tags: trunk)
01:31
Add cache-control to the self.tcl example script. (check-in: b1545db25b user: drh tags: trunk)
01:24
Add the "self.tcl" example application that displays a copy of itself. (check-in: 8f65cebe60 user: drh tags: trunk)
00:14
Add a documentation file on how to compile wapptclsh. (check-in: 3e1e061441 user: drh tags: trunk)
2018-02-07
23:55
Fix yet another typo. (check-in: e4fc8bab33 user: drh tags: trunk)
23:53
Fix documentation typos reported by Andreas Kupries. (check-in: 7afff168cb user: drh tags: trunk)
20:00
Improvements to the same-origin detection logic. (check-in: 8b769e4771 user: drh tags: trunk)
18:33
More documentation updates (check-in: f6b7dbaa54 user: drh tags: trunk)
14:27
Documentation enhancements. (check-in: 651c5f305b user: drh tags: trunk)
01:38
Mention the license (2-clause BSD) on the homepage. (check-in: 8e060c0dec user: drh tags: trunk)
01:37
New and improved documentation. (check-in: ea88c28347 user: drh tags: trunk)
2018-02-06
17:58
Fix filename dequoting in multipart/form-data interpretation. Add two test files for multipart/form-data testing. (check-in: 6cd6484c92 user: drh tags: trunk)
16:54
Adjust the regexp commands used to parse multipart/form-data to improved performance with very large upload files. (check-in: 4cc53a980a user: drh tags: trunk)
16:36
Enhance the file upload test to show uploaded images inline. (check-in: 089322b3a4 user: drh tags: trunk)
15:47
Add support for decoding multipart/form-data on POST queries. (check-in: 70438dc56d user: drh tags: trunk)
13:14
Add the WAPP_MODE cgi parameter. (check-in: 7700f1866a user: drh tags: trunk)
12:46
Add the "--local PORT" option to wapp-start. (check-in: a931abfc06 user: drh tags: trunk)
12:37
Move the implementation of wapp-start to the end of the file, where it seems to fit in better. No changes to logic. (check-in: bacdb61533 user: drh tags: trunk)
2018-02-05
04:34
Add SQLite search to the list of known users of Wapp in the wild. (check-in: 7a829f83e3 user: drh tags: trunk)
04:21
Update documentation to include the SCRIPT_FILENAME and DOCUMENT_ROOT cgi parameters. (check-in: de2bae5c84 user: drh tags: trunk)
01:31
Fix automatic CGI detection so that it works with CGI 1.1. (check-in: 95e6f7d2d2 user: drh tags: trunk)
00:45
Make sure the SCRIPT_FILENAME is a full pathname for the standalone server. (check-in: 20f4274937 user: drh tags: trunk)
2018-02-04
23:38
Add the (pwd)= output line to wapp-debug-env. (check-in: 4c985fa7e4 user: drh tags: trunk)
19:49
Make CGI parameters DOCUMENT_ROOT and SCRIPT_FILENAME available to the application. (check-in: bccd3dd07f user: drh tags: trunk)
17:58
Tweaks to the homepage. No changes to code. (check-in: 1bb173f9a3 user: drh tags: trunk)
2018-02-02
16:14
Add real-world usage examples for Wapp. (check-in: 405b0e8963 user: drh tags: trunk)
16:03
Remove deprecated interfaces. Improved comments in the wapp.tcl source code. (check-in: d45c7180be user: drh tags: trunk)
15:40
More tweaks to the homepage documentation. (check-in: c0fdd17fd6 user: drh tags: trunk)
14:51
Updates to the documentation. (check-in: 985de3d884 user: drh tags: trunk)
05:45
Further tweaks to the documentation. (check-in: 7387e256f9 user: drh tags: trunk)
05:41
Improved documentation. No code changes. (check-in: 7ec2de27c9 user: drh tags: trunk)
01:02
Faster dispatch using "info procs" rather than "info commands". (check-in: 3a5f24fc30 user: drh tags: trunk)
2018-02-01
22:07
Move test files into the tests/ folder. Add the encode-binary-file.tcl utility script. Add an image to tests/test01.tcl. Move the "-translation binary" out of wappInt-handle-request and into wappInt-handle-cgi-request. (check-in: 7c173f40cb user: drh tags: trunk)
21:19
Always set "-translation binary" on an http reply. Add an icon to the shoplist.tcl example application. (check-in: 098049fe94 user: drh tags: trunk)
18:15
Work on the example scripts so that they all work with the new default CSP. Add comments to all scripts. Provide a demonstration database for shoplist.tcl. Add a README.md to the examples folder. (check-in: f28e72c49e user: drh tags: trunk)
17:28
Restructure and comment the shoplist.tcl example to make it easier for people to read and understand. (check-in: 47e58e7d2b user: drh tags: trunk)
13:31
More shoplist.tcl enhancements. (check-in: 2169d31440 user: drh tags: trunk)
03:45
Updates to the documentation. (check-in: c594b95816 user: drh tags: trunk)
03:11
Safety enhancements: (A) Invoke the application with the --lint option to do a self-check for unsafe constructs. (B) Bring back the wapp-unsafe command for the rare cases where it is actually needed. (C) Comment out wapp.tcl comment lines when building the wapptclsh application. (check-in: 15fbf713e6 user: drh tags: trunk)
2018-01-31
22:25
Fix typo in the shoplist.tcl app. (check-in: 0b681c21b4 user: drh tags: trunk)
22:15
Updated shopping list app (check-in: 8526aa6f10 user: drh tags: trunk)
18:52
Add the shoplist.tcl example script. (check-in: 351d1c4858 user: drh tags: trunk)
01:09
Get automatic compression working for CGI. (check-in: 9aa39ada4d user: drh tags: trunk)
00:19
Add a restrictive default Content Security Policy and provide the wapp-content-security-policy command to change it if necessary. (check-in: 4022bf292d user: drh tags: trunk)
2018-01-30
23:46
Add wapp-allow-xorigin-params and SAME_ORIGIN. Update the documentation accordingly. (check-in: e82121be4d user: drh tags: trunk)