changeset 34255:b59620c52eec

hgwebdir: read 'web.template' untrusted The 'hgweb_mod.py' version of this read it untrusted. For consistency we align the two versions of this code.
author Boris Feld <boris.feld@octobus.net>
date Fri, 15 Sep 2017 18:57:50 +0200
parents 95f80c095804
children ab379eed2e31
files mercurial/hgweb/hgwebdir_mod.py
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/mercurial/hgweb/hgwebdir_mod.py	Fri Jun 30 03:45:53 2017 +0200
+++ b/mercurial/hgweb/hgwebdir_mod.py	Fri Sep 15 18:57:50 2017 +0200
@@ -174,7 +174,7 @@
         self.ui = u
         encoding.encoding = self.ui.config('web', 'encoding')
         self.style = self.ui.config('web', 'style')
-        self.templatepath = self.ui.config('web', 'templates')
+        self.templatepath = self.ui.config('web', 'templates', untrusted=False)
         self.stripecount = self.ui.config('web', 'stripes')
         if self.stripecount:
             self.stripecount = int(self.stripecount)