revset: add 'only' to DoS-safe symbols
There is no reason to disable it in hgweb because the same query can be
written without using 'only()'.
--- a/mercurial/revset.py Wed Dec 03 22:52:54 2014 +0900
+++ b/mercurial/revset.py Wed Dec 03 22:56:42 2014 +0900
@@ -1798,6 +1798,7 @@
"min",
"modifies",
"obsolete",
+ "only",
"origin",
"outgoing",
"p1",