# HG changeset patch # User Benoit Boissinot # Date 1211804426 -7200 # Node ID 8542fac26f63d425bb648dd848085036af19517b # Parent 1afb186d29341e1b1444ceddae20e56d78fdbfc4 hgweb: correctly validate permissions with streamclone pulling diff -r 1afb186d2934 -r 8542fac26f63 mercurial/hgweb/protocol.py --- a/mercurial/hgweb/protocol.py Sun May 25 14:05:35 2008 -0700 +++ b/mercurial/hgweb/protocol.py Mon May 26 14:20:26 2008 +0200 @@ -224,5 +224,7 @@ os.unlink(tempname) def stream_out(web, req): + if not web.allowpull: + return req.respond(HTTP_OK, HGTYPE) streamclone.stream_out(web.repo, req, untrusted=True)