##// END OF EJS Templates
api: security, fix problem when absolute paths are specified with API call, that would allow...
api: security, fix problem when absolute paths are specified with API call, that would allow forking of path based repos if paths are known to end users.

File last commit:

r2564:146d08cc default
r2664:36dbf06f stable
Show More
repo_edit_remote.mako
40 lines | 1.6 KiB | application/x-mako | MakoHtmlLexer
<div class="panel panel-default">
<div class="panel-heading">
<h3 class="panel-title">${_('Remote url')}</h3>
</div>
<div class="panel-body">
<h4>${_('Manually pull changes from external repository.')}</h4>
%if c.rhodecode_db_repo.clone_uri:
${_('Remote mirror url')}:
<a href="${c.rhodecode_db_repo.clone_uri}">${c.rhodecode_db_repo.clone_uri_hidden}</a>
<p>
${_('Pull can be automated by such api call. Can be called periodically in crontab etc.')}
<br/>
<code>
${h.api_call_example(method='pull', args={"repoid": c.rhodecode_db_repo.repo_name})}
</code>
</p>
${h.secure_form(h.route_path('edit_repo_remote_pull', repo_name=c.repo_name), request=request)}
<div class="form">
<div class="fields">
${h.submit('remote_pull_%s' % c.rhodecode_db_repo.repo_name,_('Pull changes from remote location'),class_="btn btn-small",onclick="return confirm('"+_('Confirm to pull changes from remote side')+"');")}
</div>
</div>
${h.end_form()}
%else:
${_('This repository does not have any remote mirror url set.')}
<a href="${h.route_path('edit_repo', repo_name=c.rhodecode_db_repo.repo_name)}">${_('Set remote url.')}</a>
<br/>
<br/>
<button class="btn disabled" type="submit" disabled="disabled">
${_('Pull changes from remote location')}
</button>
%endif
</div>
</div>