Mercurial > hg
diff mercurial/url.py @ 13817:7f18bab2c0b0
url: abort on file:// URLs with non-localhost hosts
author | Brodie Rao <brodie@bitheap.org> |
---|---|
date | Wed, 30 Mar 2011 20:01:31 -0700 |
parents | 2540f8087e02 |
children | bf6156bab41b |
line wrap: on
line diff
--- a/mercurial/url.py Wed Mar 30 20:00:24 2011 -0700 +++ b/mercurial/url.py Wed Mar 30 20:01:31 2011 -0700 @@ -140,6 +140,11 @@ self.host, self.port = self.host.rsplit(':', 1) if not self.host: self.host = None + + if (self.host and self.scheme == 'file' and + self.host not in ('localhost', '127.0.0.1', '[::1]')): + raise util.Abort(_('file:// URLs can only refer to localhost')) + self.path = path for a in ('user', 'passwd', 'host', 'port',