##// END OF EJS Templates
branch-permissions: fixed XSS for special named rules
marcink -
r4383:84bf794f stable
parent child Browse files
Show More
@@ -125,7 +125,7 b' class RepoFilesView(RepoAppView):'
125 125 self.db_repo_name, branch_name)
126 126 if branch_perm and branch_perm not in ['branch.push', 'branch.push_force']:
127 127 message = _('Branch `{}` changes forbidden by rule {}.').format(
128 branch_name, rule)
128 h.escape(branch_name), rule)
129 129 h.flash(message, 'warning')
130 130
131 131 if json_mode:
General Comments 0
You need to be logged in to leave comments. Login now