Mercurial > public > mercurial-scm > hg-stable
comparison mercurial/hgweb/webcommands.py @ 19883:904061628dc4 stable
hgweb: add escaping of tags and bookmarks in graph view
author | Matt Mackall <mpm@selenic.com> |
---|---|
date | Wed, 09 Oct 2013 12:02:32 -0700 |
parents | 5cbf413ce658 |
children | e828975722c8 |
comparison
equal
deleted
inserted
replaced
19882:55c763926a28 | 19883:904061628dc4 |
---|---|
920 branchnode = None | 920 branchnode = None |
921 branch = branch, branchnode == ctx.node() | 921 branch = branch, branchnode == ctx.node() |
922 | 922 |
923 if usetuples: | 923 if usetuples: |
924 data.append((node, vtx, edges, desc, user, age, branch, | 924 data.append((node, vtx, edges, desc, user, age, branch, |
925 ctx.tags(), ctx.bookmarks())) | 925 [cgi.escape(x) for x in ctx.tags()], |
926 [cgi.escape(x) for x in ctx.bookmarks()])) | |
926 else: | 927 else: |
927 edgedata = [dict(col=edge[0], nextcol=edge[1], | 928 edgedata = [dict(col=edge[0], nextcol=edge[1], |
928 color=(edge[2] - 1) % 6 + 1, | 929 color=(edge[2] - 1) % 6 + 1, |
929 width=edge[3], bcolor=edge[4]) | 930 width=edge[3], bcolor=edge[4]) |
930 for edge in edges] | 931 for edge in edges] |