Mercurial > p > roundup > code
annotate .hgignore @ 8356:63390dcfcfe9
bug: fix template use of structure with untrusted data
Looks like an xSS bug with an early version of the template that was
fixed in the code but never in the deployed tracker. It has been a
while since this particular construct has been in the classic template
which is the base for the tracker.
This has been fixed on the deployed tracker as well.
reported by 4bug of ChaMd5 Security Team H1 Group
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Tue, 08 Jul 2025 10:23:09 -0400 |
| parents | b99e76e76496 |
| children |
| rev | line source |
|---|---|
|
4594
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
1 syntax: glob |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
2 |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
3 *.orig |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
4 *.rej |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
5 *~ |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
6 \#*\# |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
7 .\#* |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
8 *.swp |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
9 *.tmp |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
10 *.pyd |
| 4558 | 11 *.pyc |
| 12 *.pyo | |
| 13 build | |
| 14 demo | |
| 15 dist | |
| 16 MANIFEST | |
|
6378
b57c3d50505b
issue2550899 Migrate setup.py to setuptools
John Rouillard <rouilj@ieee.org>
parents:
4703
diff
changeset
|
17 roundup.egg-info |
| 4558 | 18 _test_* |
| 19 *.cover | |
|
4594
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
20 share/doc/roundup/html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
21 doc/FAQ.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
22 doc/admin_guide.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
23 doc/announcement.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
24 doc/customizing.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
25 doc/design.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
26 doc/developers.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
27 doc/features.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
28 doc/glossary.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
29 doc/implementation.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
30 doc/index.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
31 doc/installation.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
32 doc/mysql.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
33 doc/overview.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
34 doc/postgresql.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
35 doc/security.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
36 doc/tracker_templates.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
37 doc/upgrading.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
38 doc/user_guide.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
39 doc/whatsnew-0.7.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
40 doc/whatsnew-0.8.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
41 doc/xmlrpc.html |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
42 locale/*.mo |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
43 locale/*.bak |
|
c992e7dcac92
Created .hgignore, removed all .gitignore files
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4558
diff
changeset
|
44 locale/*.poedit |
|
4597
5ca12e280a84
Ignore directories generated by "make html" in website/www
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4594
diff
changeset
|
45 website/www/_tmp/ |
|
4703
8e34362a14f7
issue2550774: Fix generating the website documentation
John Kristensen <john@jerrykan.com>
parents:
4613
diff
changeset
|
46 website/www/COPYING.txt |
|
4613
9d0189350187
Ignoring the symbolic link that the www/Makefile may create.
Bernhard Reiter <bernhard@intevation.de>
parents:
4597
diff
changeset
|
47 website/www/docs |
|
4597
5ca12e280a84
Ignore directories generated by "make html" in website/www
Thomas Arendsen Hein <thomas@intevation.de>
parents:
4594
diff
changeset
|
48 website/www/html/ |
|
6661
18445cd132c8
Add .pytest_cache to .hgignore
Ralf Schlatterbeck <rsc@runtux.com>
parents:
6378
diff
changeset
|
49 .pytest_cache |
|
8300
b99e76e76496
Make native date and number elements configurable
Ralf Schlatterbeck <rsc@runtux.com>
parents:
6661
diff
changeset
|
50 .hypothesis |
