Mercurial > hg
annotate templates/search.tmpl @ 3555:881064004fd0
use untrusted settings in hgweb
The only exceptions are web.static and web.templates, since they can
be used to get any file that is readable by the user running the CGI
script.
Other options can be (ab)used to increase the use of the cpu
(allow_bz2) or of the bandwidth (server.uncompressed), but they're
trusted anyway.
author | Alexis S. L. Carvalho <alexis@cecm.usp.br> |
---|---|
date | Thu, 26 Oct 2006 19:25:45 +0200 |
parents | ce8f31e0b3b8 |
children | 1196998c62e3 |
rev | line source |
---|---|
538 | 1 #header# |
2 <title>#repo|escape#: searching for #query|escape#</title> | |
3 </head> | |
4 <body> | |
5 | |
6 <div class="buttons"> | |
3363
ce8f31e0b3b8
hgweb: Apply the new method of passing session variables to links.
Thomas Arendsen Hein <thomas@intevation.de>
parents:
3362
diff
changeset
|
7 <a href="#url#log{sessionvars%urlparameter}">changelog</a> |
ce8f31e0b3b8
hgweb: Apply the new method of passing session variables to links.
Thomas Arendsen Hein <thomas@intevation.de>
parents:
3362
diff
changeset
|
8 <a href="#url#shortlog{sessionvars%urlparameter}">shortlog</a> |
ce8f31e0b3b8
hgweb: Apply the new method of passing session variables to links.
Thomas Arendsen Hein <thomas@intevation.de>
parents:
3362
diff
changeset
|
9 <a href="#url#tags{sessionvars%urlparameter}">tags</a> |
ce8f31e0b3b8
hgweb: Apply the new method of passing session variables to links.
Thomas Arendsen Hein <thomas@intevation.de>
parents:
3362
diff
changeset
|
10 <a href="#url#file/#node|short#{sessionvars%urlparameter}">manifest</a> |
538 | 11 </div> |
12 | |
13 <h2>searching for #query|escape#</h2> | |
14 | |
15 <form> | |
3362
887da2247b57
hgweb: Keep session variables (currently only style) in HTML forms, too.
Thomas Arendsen Hein <thomas@intevation.de>
parents:
3273
diff
changeset
|
16 {sessionvars%hiddenformentry} |
1441
cbc36ad70945
hgweb: a couple of fixes on search page
TK Soh <teekaysoh@yahoo.com>
parents:
1432
diff
changeset
|
17 <p> |
538 | 18 search: |
19 <input name="rev" type="text" width="30" value="#query|escape#"> | |
1441
cbc36ad70945
hgweb: a couple of fixes on search page
TK Soh <teekaysoh@yahoo.com>
parents:
1432
diff
changeset
|
20 </p> |
538 | 21 </form> |
22 | |
23 #entries# | |
24 | |
25 <form> | |
3362
887da2247b57
hgweb: Keep session variables (currently only style) in HTML forms, too.
Thomas Arendsen Hein <thomas@intevation.de>
parents:
3273
diff
changeset
|
26 {sessionvars%hiddenformentry} |
1441
cbc36ad70945
hgweb: a couple of fixes on search page
TK Soh <teekaysoh@yahoo.com>
parents:
1432
diff
changeset
|
27 <p> |
538 | 28 search: |
1441
cbc36ad70945
hgweb: a couple of fixes on search page
TK Soh <teekaysoh@yahoo.com>
parents:
1432
diff
changeset
|
29 <input name="rev" type="text" width="30" value="#query|escape#"> |
cbc36ad70945
hgweb: a couple of fixes on search page
TK Soh <teekaysoh@yahoo.com>
parents:
1432
diff
changeset
|
30 </p> |
538 | 31 </form> |
32 | |
33 #footer# |