##// END OF EJS Templates
branch-permissions: fixed XSS for special named rules
marcink -
r4383:84bf794f stable
parent child Browse files
Show More
@@ -125,7 +125,7 b' class RepoFilesView(RepoAppView):'
125 self.db_repo_name, branch_name)
125 self.db_repo_name, branch_name)
126 if branch_perm and branch_perm not in ['branch.push', 'branch.push_force']:
126 if branch_perm and branch_perm not in ['branch.push', 'branch.push_force']:
127 message = _('Branch `{}` changes forbidden by rule {}.').format(
127 message = _('Branch `{}` changes forbidden by rule {}.').format(
128 branch_name, rule)
128 h.escape(branch_name), rule)
129 h.flash(message, 'warning')
129 h.flash(message, 'warning')
130
130
131 if json_mode:
131 if json_mode:
General Comments 0
You need to be logged in to leave comments. Login now