annotate mercurial/templates/rss/header.tmpl @ 18526:9409aeaafdc1 stable

hgweb: urlescape all urls, HTML escape repo/tag/branch/... names Without this, repository paths or names containing e.g. & characters or html tags yielded strange results, possibly allowing cross-site scripting attacks.
author Thomas Arendsen Hein <thomas@intevation.de>
date Fri, 01 Feb 2013 20:43:35 +0100
parents f91e5630ce7e
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
3948
be5d099e7a62 Send encoding information in rss header
Edouard Gomez <ed.gomez@free.fr>
parents: 3423
diff changeset
1 <?xml version="1.0" encoding="{encoding}"?>
599
765182a4c843 [PATCH] Add RSS support to hgweb
mpm@selenic.com
parents:
diff changeset
2 <rss version="2.0">
765182a4c843 [PATCH] Add RSS support to hgweb
mpm@selenic.com
parents:
diff changeset
3 <channel>
18526
9409aeaafdc1 hgweb: urlescape all urls, HTML escape repo/tag/branch/... names
Thomas Arendsen Hein <thomas@intevation.de>
parents: 9999
diff changeset
4 <link>{urlbase}{url|urlescape}</link>
599
765182a4c843 [PATCH] Add RSS support to hgweb
mpm@selenic.com
parents:
diff changeset
5 <language>en-us</language>