| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@17165 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
|
|
|
|
|
| |
mercurial: work around faulty parsing of early command options
Use -sVALUE and --long=VALUE instead of "-s VALUE" and "--long VALUE"
respectively.
Contributed by Yuya Nishihara.
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@17076 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
|
|
|
|
|
|
| |
mercurial: separate command options and positional arguments with "--"
We don't have much problems here thanks to hgtarget(path) and CGI.escape(),
which prepends a repository path and encodes "=" character respectively, but
it's better to not rely on the side effect of these functions.
Contributed by Yuya Nishihara.
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@17075 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
mercurial: reject malicious command argument
We've got a security report from the Phabricator team, which basically says
--config and --debugger arguments can be injected anywhere to lead to an
arbitrary command execution.
https://secure.phabricator.com/rPa7921a4448093d00defa8bd18f35b8c8f8bf3314
This is a fundamental issue of the argument parsing rules in Mercurial, which
allows extensions to populate their parsing rules and such extensions can be
loaded by "--config extensions.<name>=". There's a chicken and egg problem.
We're working on hardening the parsing rules, but which won't come in by
default as it would be a behavior change.
This patch adds a verification to reject malicious command arguments as a
last ditch. The subsequent patches will fix the problem in more appropriate
way.
Contributed by Yuya Nishihara.
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@17074 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@17007 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16745 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16631 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16621 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16571 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16534 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16524 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
git: use '--no-renames' option in 'show' command.
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16430 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Git 2.9 compatibility.
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16425 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Mercurial 4.1 compatibility.
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16331 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16291 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16146 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16144 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@16006 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15900 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15868 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15745 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15615 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15558 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15457 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15441 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15439 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15366 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15363 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15239 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@15237 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
pdf: use all lower cases for DejaVuSansMono.
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@14964 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
|
|
|
|
| |
pdf: remove italic from DejaVuSansMono.
DejaVuSansMono Italic Arabic font has problem.
Contributed by Jun NAITOH.
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@14962 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
|
|
| |
pdf: use "family" parameter instead of l(:general_pdf_fontname) at SetFont method.
Contributed by Jun NAITOH.
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@14961 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@14954 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@14953 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@14945 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@14912 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.2-stable@14896 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@14893 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@14888 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@14870 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@14766 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@14759 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Similar to List format but stores possible values as records.
git-svn-id: http://svn.redmine.org/redmine/trunk@14745 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@14716 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Patch by budo kaiman.
git-svn-id: http://svn.redmine.org/redmine/trunk@14712 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@14695 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@14694 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@14693 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@14666 e93f8b46-1217-0410-a6f0-8f06a7374b81
|