upstream/mercurial-mirror Files · mercurial/templates/rss/filelogentry.tmpl

hgweb: extract path traversal checking into standalone function...

hgweb: extract path traversal checking into standalone function A common exploit in web applications that access paths is to insert path separator strings like ".." to try to get the server to serve up files it shouldn't. We have code for detecting this in staticfile(). A subsequent commit will need to perform this test as well. Since this is security code, let's factor the check so we don't have to reinvent the wheel.

av6 - - Load All Authors

File last commit:

r30558:7817df55 stable


                r31790:62f9679d

default

Download file

             filelogentry.tmpl
        
                    7 lines
            
             | 315 B
            
                | application/x-cheetah
            
             |
                CheetahLexer
            
             / mercurial / templates / rss / filelogentry.tmpl
          
                    History
                
                 |
                  Source
                 | Raw
                 |Copy content
                 |Copy permalink

        Dan Villiom Podlaski Christiansen
    
setup: install translation files as package data...

              r9999
            
      <item>

          <title>{desc|strip|firstline|strip|escape}</title>

        av6
    
hgweb: add missing slash to file log url in rss style

              r30558
            
          <link>{urlbase}{url|urlescape}log/{node|short}/{file|urlescape}</link>

        Steven Brown
    
hgweb: apply websub filter to the changeset description in rss and atom feeds...

              r21486
            
          <description><![CDATA[{desc|strip|escape|websub|addbreaks|nonempty}]]></description>

        Dan Villiom Podlaski Christiansen
    
setup: install translation files as package data...

              r9999
            
          <author>{author|obfuscate}</author>

          <pubDate>{date|rfc822date}</pubDate>

      </item>

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

Dan Villiom Podlaski Christiansen setup: install translation files as package data...	r9999	<item>
		<title>{desc\|strip\|firstline\|strip\|escape}</title>
av6 hgweb: add missing slash to file log url in rss style	r30558	<link>{urlbase}{url\|urlescape}log/{node\|short}/{file\|urlescape}</link>
Steven Brown hgweb: apply websub filter to the changeset description in rss and atom feeds...	r21486	<description><![CDATA[{desc\|strip\|escape\|websub\|addbreaks\|nonempty}]]></description>
Dan Villiom Podlaski Christiansen setup: install translation files as package data...	r9999	<author>{author\|obfuscate}</author>
		<pubDate>{date\|rfc822date}</pubDate>
		</item>