##// END OF EJS Templates
security: fixed self-xss on archive download page.
super-admin -
r4742:c6635c91 default
parent child Browse files
Show More
@@ -381,7 +381,7 b' class RepoFilesView(RepoAppView):'
381 try:
381 try:
382 at_path = commit.get_node(at_path).path or default_at_path
382 at_path = commit.get_node(at_path).path or default_at_path
383 except Exception:
383 except Exception:
384 return Response(_('No node at path {} for this repository').format(at_path))
384 return Response(_('No node at path {} for this repository').format(h.escape(at_path)))
385
385
386 # path sha is part of subdir
386 # path sha is part of subdir
387 path_sha = ''
387 path_sha = ''
General Comments 0
You need to be logged in to leave comments. Login now