##// END OF EJS Templates
u » ewong » rhodecode-enterprise-ce-fork
RSS

Fork of rhodecode-enterprise-ce

security: escape the returned paths of files and directories....
ergo -
r1827:9e60361c default
parent child Browse files
Show More
Show file before | Show file after | Hide comments
@@ -496,7 +496,7 b' class ScmModel(BaseModel):'
496
496
497 if not flat:
497 if not flat:
498 _data = {
498 _data = {
499 "name": f.unicode_path,
499 "name": h.escape(f.unicode_path),
500 "type": "file",
500 "type": "file",
501 }
501 }
502 if extended_info:
502 if extended_info:
@@ -522,7 +522,7 b' class ScmModel(BaseModel):'
522 _data = d.unicode_path
522 _data = d.unicode_path
523 if not flat:
523 if not flat:
524 _data = {
524 _data = {
525 "name": d.unicode_path,
525 "name": h.escape(d.unicode_path),
526 "type": "dir",
526 "type": "dir",
527 }
527 }
528 if extended_info:
528 if extended_info:
General Comments 0
You need to be logged in to leave comments. Login now