Mercurial > hg-stable
changeset 34255:b59620c52eec
hgwebdir: read 'web.template' untrusted
The 'hgweb_mod.py' version of this read it untrusted. For consistency we align
the two versions of this code.
| author | Boris Feld <boris.feld@octobus.net> |
|---|---|
| date | Fri, 15 Sep 2017 18:57:50 +0200 |
| parents | 95f80c095804 |
| children | ab379eed2e31 |
| files | mercurial/hgweb/hgwebdir_mod.py |
| diffstat | 1 files changed, 1 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/mercurial/hgweb/hgwebdir_mod.py Fri Jun 30 03:45:53 2017 +0200 +++ b/mercurial/hgweb/hgwebdir_mod.py Fri Sep 15 18:57:50 2017 +0200 @@ -174,7 +174,7 @@ self.ui = u encoding.encoding = self.ui.config('web', 'encoding') self.style = self.ui.config('web', 'style') - self.templatepath = self.ui.config('web', 'templates') + self.templatepath = self.ui.config('web', 'templates', untrusted=False) self.stripecount = self.ui.config('web', 'stripes') if self.stripecount: self.stripecount = int(self.stripecount)