##// END OF EJS Templates
subrepo: set GIT_ALLOW_PROTOCOL to limit git clone protocols (SEC)...
subrepo: set GIT_ALLOW_PROTOCOL to limit git clone protocols (SEC) CVE-2016-3068 (1/1) Git's git-remote-ext remote helper provides an ext:: URL scheme that allows running arbitrary shell commands. This feature allows implementing simple git smart transports with a single shell shell command. However, git submodules could clone arbitrary URLs specified in the .gitmodules file. This was reported as CVE-2015-7545 and fixed in git v2.6.1. However, if a user directly clones a malicious ext URL, the git client will still run arbitrary shell commands. Mercurial is similarly effected. Mercurial allows specifying git repositories as subrepositories. Git ext:: URLs can be specified as Mercurial subrepositories allowing arbitrary shell commands to be run on `hg clone ...`. The Mercurial community would like to thank Blake Burkhart for reporting this issue. The description of the issue is copied from Blake's report. This commit changes submodules to pass the GIT_ALLOW_PROTOCOL env variable to git commands with the same list of allowed protocols that git submodule is using. When the GIT_ALLOW_PROTOCOL env variable is already set, we just pass it to git without modifications.

File last commit:

r28040:6db47740 stable
r28658:34d43cb8 stable
Show More
templates.txt
123 lines | 3.7 KiB | text/plain | TextLexer
Dan Villiom Podlaski Christiansen
setup: install translation files as package data...
r9999 Mercurial allows you to customize output of commands through
Yuya Nishihara
help: use --template to specify existing style...
r21943 templates. You can either pass in a template or select an existing
template-style from the command line, via the --template option.
Dan Villiom Podlaski Christiansen
setup: install translation files as package data...
r9999
You can customize output for any "log-like" command: log,
Matt Mackall
help: drop reference to glog in templates topic
r21945 outgoing, incoming, tip, parents, and heads.
Dan Villiom Podlaski Christiansen
setup: install translation files as package data...
r9999
Matt Mackall
help: mention '-T list' in templater topic
r21946 Some built-in styles are packaged with Mercurial. These can be listed
with :hg:`log --template list`. Example usage::
Dan Villiom Podlaski Christiansen
setup: install translation files as package data...
r9999
Matt Mackall
help: mention '-T list' in templater topic
r21946 $ hg log -r1.0::1.1 --template changelog
Dan Villiom Podlaski Christiansen
setup: install translation files as package data...
r9999
A template is a piece of text, with markup to invoke variable
expansion::
$ hg log -r1 --template "{node}\n"
b56ce7b07c52de7d5fd79fb89701ea538af65746
Strings in curly braces are called keywords. The availability of
keywords depends on the exact context of the templater. These
keywords are usually available for templating a log-like command:
Patrick Mezard
templates: generate keyword help dynamically
r13585 .. keywordsmarker
Dan Villiom Podlaski Christiansen
setup: install translation files as package data...
r9999
The "date" keyword does not produce human-readable output. If you
want to use a date in your output, you can use a filter to process
it. Filters are functions which return a string based on the input
Dirkjan Ochtman
help: point out need for stringification
r10759 variable. Be sure to use the stringify filter first when you're
applying a string-input filter to a list-like input variable.
You can also use a chain of filters to get the desired output::
Dan Villiom Podlaski Christiansen
setup: install translation files as package data...
r9999
$ hg tip --template "{date|isodate}\n"
2008-08-21 18:22 +0000
List of filters:
Patrick Mezard
templatefilters: move doc from templates.txt to docstrings
r13591 .. filtersmarker
Sean Farley
help: add documentation for new template functions
r18465
Note that a filter is nothing more than a function call, i.e.
``expr|filter`` is equivalent to ``filter(expr)``.
In addition to filters, there are some basic built-in functions:
Gregory Szorc
help: populate template functions via docstrings...
r24587 .. functionsmarker
Ryan McElroy
templater: introduce word function...
r21846
Yuya Nishihara
help: update template examples to use reST literal syntax...
r28040 Also, for any expression that returns a list, there is a list operator::
Sean Farley
help: add documentation for new template functions
r18465
Yuya Nishihara
help: update template examples to use reST literal syntax...
r28040 expr % "{template}"
Sean Farley
help: add documentation for new template functions
r18465
Yuya Nishihara
help: update template examples to use reST literal syntax...
r28040 As seen in the above example, ``{template}`` is interpreted as a template.
To prevent it from being interpreted, you can use an escape character ``\{``
or a raw string prefix, ``r'...'``.
Yuya Nishihara
templater: take any string literals as template, but not for rawstring (BC)...
r25596
Sean Farley
help: add documentation for new template functions
r18465 Some sample command line templates:
- Format lists, e.g. files::
$ hg log -r 0 --template "files:\n{files % ' {file}\n'}"
- Join the list of files with a ", "::
$ hg log -r 0 --template "files: {join(files, ', ')}\n"
Ryan McElroy
templatefilter: add splitlines function...
r21820 - Modify each line of a commit description::
$ hg log --template "{splitlines(desc) % '**** {line}\n'}"
Sean Farley
help: add documentation for new template functions
r18465 - Format date::
$ hg log -r 0 --template "{date(date, '%Y')}\n"
Yuya Nishihara
templater: add optional timezone argument to localdate()...
r26128 - Display date in UTC::
$ hg log -r 0 --template "{localdate(date, 'UTC')|date}\n"
Sean Farley
help: add documentation for new template functions
r18465 - Output the description set to a fill-width of 30::
Yuya Nishihara
help: rewrite template examples to use integer literals where appropriate
r25004 $ hg log -r 0 --template "{fill(desc, 30)}"
Sean Farley
help: add documentation for new template functions
r18465
- Use a conditional to test for the default branch::
$ hg log -r 0 --template "{ifeq(branch, 'default', 'on the main branch',
'on branch {branch}')}\n"
- Append a newline if not empty::
$ hg tip --template "{if(author, '{author}\n')}"
- Label the output for use with the color extension::
$ hg log -r 0 --template "{label('changeset.{phase}', node|short)}\n"
- Invert the firstline filter, i.e. everything but the first line::
$ hg log -r 0 --template "{sub(r'^.*\n?\n?', '', desc)}\n"
Matthew Turk
help: adding example 'extras' printing to 'hg help templates'
r20016
- Display the contents of the 'extra' field, one per line::
Steve Hoelzer
help: fix formatting of template example
r20170 $ hg log -r 0 --template "{join(extras, '\n')}\n"
Durham Goode
help: add ifcontains, revset, and shortest to template help...
r20531
Ryan McElroy
templatekw: introduce active subkeyword from bookmarks keyword...
r25348 - Mark the active bookmark with '*'::
Durham Goode
help: add ifcontains, revset, and shortest to template help...
r20531
Yuya Nishihara
help: rewrite template examples to not use shell escaping...
r25786 $ hg log --template "{bookmarks % '{bookmark}{ifeq(bookmark, active, '*')} '}\n"
Durham Goode
help: add ifcontains, revset, and shortest to template help...
r20531
Matt Harbison
templater: introduce {latesttag()} function to match a pattern (issue4184)...
r26485 - Find the previous release candidate tag, the distance and changes since the tag::
$ hg log -r . --template "{latesttag('re:^.*-rc$') % '{tag}, {changes}, {distance}'}\n"
Durham Goode
help: add ifcontains, revset, and shortest to template help...
r20531 - Mark the working copy parent with '@'::
$ hg log --template "{ifcontains(rev, revset('.'), '@')}\n"
Ryan McElroy
templater: introduce startswith function...
r21821
Yuya Nishihara
templater: switch ctx of list expression to rev of revset() (BC)...
r26234 - Show details of parent revisions::
$ hg log --template "{revset('parents(%d)', rev) % '{desc|firstline}\n'}"
Ryan McElroy
templater: introduce startswith function...
r21821 - Show only commit descriptions that start with "template"::
Yuya Nishihara
help: rewrite template examples to not use shell escaping...
r25786 $ hg log --template "{startswith('template', firstline(desc))}\n"
Ryan McElroy
templater: introduce word function...
r21846
- Print the first word of each line of a commit message::
Yuya Nishihara
help: rewrite template examples to use integer literals where appropriate
r25004 $ hg log --template "{word(0, desc)}\n"