Files
@ 04d2bcfbe7a6
Branch filter:
Location: kallithea/rhodecode/templates/search/search_commit.html - annotation
04d2bcfbe7a6
1.7 KiB
text/html
security fix, inspired by django security
announcement: https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
- filter out bad schemes and netloc differences
announcement: https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
- filter out bad schemes and netloc differences
5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 88b0e82bcba4 88b0e82bcba4 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d 5f21a9dcb09d | ##commit highligthing
%for cnt,sr in enumerate(c.formated_results):
%if h.HasRepoPermissionAny('repository.write','repository.read','repository.admin')(sr['repository'],'search results check'):
<div class="table">
<div id="body${cnt}" class="codeblock">
<div class="code-header">
<div class="search-path">${h.link_to(h.literal('%s » %s' % (sr['repository'],sr['raw_id'])),
h.url('changeset_home',repo_name=sr['repository'],revision=sr['raw_id']))}
</div>
</div>
<div class="left">
<div class="author">
<div class="gravatar">
<img alt="gravatar" src="${h.gravatar_url(h.email(sr['author']),20)}"/>
</div>
<span>${h.person(sr['author'])}</span><br/>
<span><a href="mailto:${h.email_or_none(sr['author'])}">${h.email_or_none(sr['author'])}</a></span><br/>
</div>
%if sr['message_hl']:
<div class="search-code-body">
<pre>${h.literal(sr['message_hl'])}</pre>
</div>
%else:
<div class="message">${h.urlify_commit(sr['message'], sr['repository'])}</div>
%endif
</div>
</div>
</div>
%else:
%if cnt == 0:
<div class="table">
<div id="body${cnt}" class="codeblock">
<div class="error">${_('Permission denied')}</div>
</div>
</div>
%endif
%endif
%endfor
%if c.cur_query and c.formated_results:
<div class="pagination-wh pagination-left">
${c.formated_results.pager('$link_previous ~2~ $link_next')}
</div>
%endif
|