tests/test-gendoc-sv.t
author Gregory Szorc <gregory.szorc@gmail.com>
Fri, 31 Mar 2017 21:47:26 -0700
changeset 31790 62f9679df1f2
parent 28809 7a1ad08b9ff5
permissions -rw-r--r--
hgweb: extract path traversal checking into standalone function A common exploit in web applications that access paths is to insert path separator strings like ".." to try to get the server to serve up files it shouldn't. We have code for detecting this in staticfile(). A subsequent commit will need to perform this test as well. Since this is security code, let's factor the check so we don't have to reinvent the wheel.

#require docutils gettext

  $ $TESTDIR/check-gendoc sv
  checking for parse errors