Thread (3 messages) flat view 3 messages, 1 author, 2016-06-15

[PATCHv2 0/2] gitweb: Make $prevent_xss protection for 'blob_plain' more usable

From: Jakub Narebski <hidden>
Date: 2016-06-15 22:51:32

This series is improvement and extending of patch with the same name,
containing only the first patch in the series, sent to git mailing
list on 10.06.2011, and present in 'pu' as fb76adb (jn/mime-type-with-params).

This series is to replace it.

The original impulse behind creating this series was the fact that the
summary of previously sent commit was quite cryptic, and didn't really
explain what it was intended to do.  While at it I have added one more
simplification on top of the one proposed by Junio.

The second path in this series is to have gitweb treat the same
'blob_plain' view of both *.xhtml (with application/xhtml+xml
mimetype) and *.html (text/html), when $prevent_xss is on.

Jakub Narebski (2):
  gitweb: Serve text/*  'blob_plain' as text/plain with $prevent_xss
  gitweb: Serve */*+xml 'blob_plain' as text/plain with $prevent_xss

 gitweb/gitweb.perl |   11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)

-- 
1.7.5
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help