mercurial/templates/spartan/fileannotate.tmpl
author Thomas Arendsen Hein <thomas@intevation.de>
Fri, 01 Feb 2013 20:43:35 +0100
branchstable
changeset 18526 9409aeaafdc1
parent 18259 7bf412b767fe
child 18628 52305554fd6e
permissions -rw-r--r--
hgweb: urlescape all urls, HTML escape repo/tag/branch/... names Without this, repository paths or names containing e.g. & characters or html tags yielded strange results, possibly allowing cross-site scripting attacks.

{header}
<title>{repo|escape}: {file|escape} annotate</title>
</head>
<body>

<div class="buttons">
<a href="{url|urlescape}log/{rev}{sessionvars%urlparameter}">changelog</a>
<a href="{url|urlescape}shortlog/{rev}{sessionvars%urlparameter}">shortlog</a>
<a href="{url|urlescape}graph{sessionvars%urlparameter}">graph</a>
<a href="{url|urlescape}tags{sessionvars%urlparameter}">tags</a>
<a href="{url|urlescape}branches{sessionvars%urlparameter}">branches</a>
<a href="{url|urlescape}rev/{node|short}{sessionvars%urlparameter}">changeset</a>
<a href="{url|urlescape}file/{node|short}{path|urlescape}{sessionvars%urlparameter}">files</a>
<a href="{url|urlescape}file/{node|short}/{file|urlescape}{sessionvars%urlparameter}">file</a>
<a href="{url|urlescape}log/{node|short}/{file|urlescape}{sessionvars%urlparameter}">revisions</a>
<a href="{url|urlescape}raw-annotate/{node|short}/{file|urlescape}">raw</a>
<a href="{url|urlescape}help{sessionvars%urlparameter}">help</a>
</div>

<h2><a href="/">Mercurial</a> {pathdef%breadcrumb} / annotate {file|escape}</h2>

<table>
<tr>
 <td class="metatag">changeset {rev}:</td>
 <td><a href="{url|urlescape}rev/{node|short}{sessionvars%urlparameter}">{node|short}</a></td></tr>
{parent%fileannotateparent}
{child%fileannotatechild}
<tr>
 <td class="metatag">author:</td>
 <td>{author|obfuscate}</td></tr>
<tr>
 <td class="metatag">date:</td>
 <td class="date age">{date|rfc822date}</td>
</tr>
<tr>
 <td class="metatag">permissions:</td>
 <td>{permissions|permissions}</td>
</tr>
<tr>
  <td class="metatag">description:</td>
  <td>{desc|strip|escape|addbreaks|nonempty}</td>
</tr>
</table>

<table cellspacing="0" cellpadding="0">
{annotate%annotateline}
</table>

{footer}