Mercurial > public > mercurial-scm > hg-stable
diff mercurial/hgweb/webcommands.py @ 19883:904061628dc4 stable
hgweb: add escaping of tags and bookmarks in graph view
author | Matt Mackall <mpm@selenic.com> |
---|---|
date | Wed, 09 Oct 2013 12:02:32 -0700 |
parents | 5cbf413ce658 |
children | e828975722c8 |
line wrap: on
line diff
--- a/mercurial/hgweb/webcommands.py Wed Oct 09 11:50:19 2013 -0700 +++ b/mercurial/hgweb/webcommands.py Wed Oct 09 12:02:32 2013 -0700 @@ -922,7 +922,8 @@ if usetuples: data.append((node, vtx, edges, desc, user, age, branch, - ctx.tags(), ctx.bookmarks())) + [cgi.escape(x) for x in ctx.tags()], + [cgi.escape(x) for x in ctx.bookmarks()])) else: edgedata = [dict(col=edge[0], nextcol=edge[1], color=(edge[2] - 1) % 6 + 1,