Mercurial > hg
changeset 6630:8542fac26f63
hgweb: correctly validate permissions with streamclone pulling
| author | Benoit Boissinot <benoit.boissinot@ens-lyon.org> |
|---|---|
| date | Mon, 26 May 2008 14:20:26 +0200 |
| parents | 1afb186d2934 |
| children | a2b13cac0922 |
| files | mercurial/hgweb/protocol.py |
| diffstat | 1 files changed, 2 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/mercurial/hgweb/protocol.py Sun May 25 14:05:35 2008 -0700 +++ b/mercurial/hgweb/protocol.py Mon May 26 14:20:26 2008 +0200 @@ -224,5 +224,7 @@ os.unlink(tempname) def stream_out(web, req): + if not web.allowpull: + return req.respond(HTTP_OK, HGTYPE) streamclone.stream_out(web.repo, req, untrusted=True)