# HG changeset patch # User Boris Feld # Date 1505494670 -7200 # Node ID b59620c52eecb98556d1112a168281f002fdb57c # Parent 95f80c0958041fc559b8f6e42cc9eb60925cf4a4 hgwebdir: read 'web.template' untrusted The 'hgweb_mod.py' version of this read it untrusted. For consistency we align the two versions of this code. diff -r 95f80c095804 -r b59620c52eec mercurial/hgweb/hgwebdir_mod.py --- a/mercurial/hgweb/hgwebdir_mod.py Fri Jun 30 03:45:53 2017 +0200 +++ b/mercurial/hgweb/hgwebdir_mod.py Fri Sep 15 18:57:50 2017 +0200 @@ -174,7 +174,7 @@ self.ui = u encoding.encoding = self.ui.config('web', 'encoding') self.style = self.ui.config('web', 'style') - self.templatepath = self.ui.config('web', 'templates') + self.templatepath = self.ui.config('web', 'templates', untrusted=False) self.stripecount = self.ui.config('web', 'stripes') if self.stripecount: self.stripecount = int(self.stripecount)