Mercurial > hg
annotate mercurial/templates/rss/header.tmpl @ 18526:9409aeaafdc1 stable
hgweb: urlescape all urls, HTML escape repo/tag/branch/... names
Without this, repository paths or names containing e.g. & characters or html
tags yielded strange results, possibly allowing cross-site scripting attacks.
author | Thomas Arendsen Hein <thomas@intevation.de> |
---|---|
date | Fri, 01 Feb 2013 20:43:35 +0100 |
parents | f91e5630ce7e |
children |
rev | line source |
---|---|
3948
be5d099e7a62
Send encoding information in rss header
Edouard Gomez <ed.gomez@free.fr>
parents:
3423
diff
changeset
|
1 <?xml version="1.0" encoding="{encoding}"?> |
599 | 2 <rss version="2.0"> |
3 <channel> | |
18526
9409aeaafdc1
hgweb: urlescape all urls, HTML escape repo/tag/branch/... names
Thomas Arendsen Hein <thomas@intevation.de>
parents:
9999
diff
changeset
|
4 <link>{urlbase}{url|urlescape}</link> |
599 | 5 <language>en-us</language> |