]> source.dussan.org Git - gitea.git/commitdiff
Prevent double encoding of branch names in delete branch (#18714) (#18738)
authorzeripath <art27@cantab.net>
Sat, 12 Feb 2022 15:17:45 +0000 (15:17 +0000)
committerGitHub <noreply@github.com>
Sat, 12 Feb 2022 15:17:45 +0000 (15:17 +0000)
Backport #18714

* Prevent double encoding of branch names in delete branch

There is a double encoding issue in branch template whereby the branch name
ends up double encoded.

Fix #18709

Signed-off-by: Andrew Thornton <art27@cantab.net>
* and tag name

Signed-off-by: Andrew Thornton <art27@cantab.net>
* And fix #18704

Signed-off-by: Andrew Thornton <art27@cantab.net>
templates/mail/issue/assigned.tmpl
templates/repo/branch/list.tmpl
templates/repo/release/list.tmpl

index e1156c53358368ac7a6022287497172017956c17..ffb15ef67771482658bc6bbc6f26156f70ad6238 100644 (file)
@@ -9,7 +9,7 @@
 </head>
 
 {{$repo_url := printf "<a href='%s'>%s</a>" (Escape .Issue.Repo.HTMLURL) (Escape .Issue.Repo.FullName)}}
-{{$link := printf "<a href='%s'>#%d</a>" (Escape .Link) (Escape .Issue.Index)}}
+{{$link := printf "<a href='%s'>#%d</a>" (Escape .Link) .Issue.Index}}
 <body>
        <p>
                {{if .IsPull}}
index fc819010692c4322b06a58aef35eb1fbd9234013..d2b54589ce780c59d63b70fc82b0bc8eb94c6c99 100644 (file)
                                                                                {{end}}
                                                                                {{if and $.IsWriter (not $.IsMirror) (not $.Repository.IsArchived) (not .IsProtected)}}
                                                                                        {{if .IsDeleted}}
-                                                                                               <a class="ui basic jump button icon tooltip undo-button" href data-url="{{$.Link}}/restore?branch_id={{.DeletedBranch.ID}}&name={{PathEscapeSegments .DeletedBranch.Name}}" data-content="{{$.i18n.Tr "repo.branch.restore" (.Name)}}" data-position="top right"><span class="text blue">{{svg "octicon-reply"}}</span></a>
+                                                                                               <a class="ui basic jump button icon tooltip undo-button" href data-url="{{$.Link}}/restore?branch_id={{.DeletedBranch.ID}}&name={{.DeletedBranch.Name}}" data-content="{{$.i18n.Tr "repo.branch.restore" (.Name)}}" data-position="top right"><span class="text blue">{{svg "octicon-reply"}}</span></a>
                                                                                        {{else}}
-                                                                                               <a class="ui basic jump button icon tooltip delete-button delete-branch-button" href data-url="{{$.Link}}/delete?name={{PathEscapeSegments .Name}}" data-content="{{$.i18n.Tr "repo.branch.delete" (.Name)}}" data-position="top right" data-name="{{.Name}}">
+                                                                                               <a class="ui basic jump button icon tooltip delete-button delete-branch-button" href data-url="{{$.Link}}/delete?name={{.Name}}" data-content="{{$.i18n.Tr "repo.branch.delete" (.Name)}}" data-position="top right" data-name="{{.Name}}">
                                                                                                        {{svg "octicon-trash"}}
                                                                                                </a>
                                                                                        {{end}}
index 01f01cdeff2f4b2efdb27f9e63ddfdb8334b0023..d770383bc39bc92ab9bfb57e050613d5b798937f 100644 (file)
@@ -40,7 +40,7 @@
                                                                                <a class="archive-link mr-3" href="{{$.RepoLink}}/archive/{{.TagName | PathEscapeSegments}}.zip" rel="nofollow">{{svg "octicon-file-zip" 16 "mr-2"}}ZIP</a>
                                                                                <a class="archive-link mr-3" href="{{$.RepoLink}}/archive/{{.TagName | PathEscapeSegments}}.tar.gz" rel="nofollow">{{svg "octicon-file-zip" 16 "mr-2"}}TAR.GZ</a>
                                                                                {{if (and $.CanCreateRelease $release.IsTag)}}
-                                                                                       <a class="mr-3" href="{{$.RepoLink}}/releases/new?tag={{.TagName | PathEscapeSegments}}">{{svg "octicon-tag" 16 "mr-2"}}{{$.i18n.Tr "repo.release.new_release"}}</a>
+                                                                                       <a class="mr-3" href="{{$.RepoLink}}/releases/new?tag={{.TagName}}">{{svg "octicon-tag" 16 "mr-2"}}{{$.i18n.Tr "repo.release.new_release"}}</a>
                                                                                {{end}}
                                                                                {{if (and ($.Permission.CanWrite $.UnitTypeCode) $release.IsTag)}}
                                                                                        <a class="ui red delete-button mr-3" data-url="{{$.RepoLink}}/tags/delete" data-id="{{.ID}}">