Mercurial > hg
changeset 34193:734983de2291 stable
hgwebdir: read 'web.template' untrusted
The 'hgweb_mod.py' version of this read it untrusted. For consistency we align
the two versions of this code.
| author | Boris Feld <boris.feld@octobus.net> |
|---|---|
| date | Fri, 15 Sep 2017 18:57:50 +0200 |
| parents | 1908dc958639 |
| children | 920977f72c7b |
| files | mercurial/hgweb/hgwebdir_mod.py |
| diffstat | 1 files changed, 2 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/mercurial/hgweb/hgwebdir_mod.py Mon Sep 11 15:59:18 2017 -0700 +++ b/mercurial/hgweb/hgwebdir_mod.py Fri Sep 15 18:57:50 2017 +0200 @@ -173,7 +173,8 @@ encoding.encoding = self.ui.config('web', 'encoding', encoding.encoding) self.style = self.ui.config('web', 'style', 'paper') - self.templatepath = self.ui.config('web', 'templates', None) + self.templatepath = self.ui.config('web', 'templates', None, + untrusted=False) self.stripecount = self.ui.config('web', 'stripes', 1) if self.stripecount: self.stripecount = int(self.stripecount)