comparison mercurial/hgweb/webcommands.py @ 19883:904061628dc4 stable

hgweb: add escaping of tags and bookmarks in graph view
author Matt Mackall <mpm@selenic.com>
date Wed, 09 Oct 2013 12:02:32 -0700
parents 5cbf413ce658
children e828975722c8
comparison
equal deleted inserted replaced
19882:55c763926a28 19883:904061628dc4
920 branchnode = None 920 branchnode = None
921 branch = branch, branchnode == ctx.node() 921 branch = branch, branchnode == ctx.node()
922 922
923 if usetuples: 923 if usetuples:
924 data.append((node, vtx, edges, desc, user, age, branch, 924 data.append((node, vtx, edges, desc, user, age, branch,
925 ctx.tags(), ctx.bookmarks())) 925 [cgi.escape(x) for x in ctx.tags()],
926 [cgi.escape(x) for x in ctx.bookmarks()]))
926 else: 927 else:
927 edgedata = [dict(col=edge[0], nextcol=edge[1], 928 edgedata = [dict(col=edge[0], nextcol=edge[1],
928 color=(edge[2] - 1) % 6 + 1, 929 color=(edge[2] - 1) % 6 + 1,
929 width=edge[3], bcolor=edge[4]) 930 width=edge[3], bcolor=edge[4])
930 for edge in edges] 931 for edge in edges]