user/sven/git.git/gitweb, branch v1.6.4.5

gitweb: Introduce esc_attr to escape attributes of HTML elements

2010-12-15T19:16:31Z

It is needed only to escape attributes of handcrafted HTML elements, and not those generated using CGI.pm subroutines / methods for HTML generation. While at it, add esc_url and esc_html where needed, and prefer to use CGI.pm HTML generating methods than handcrafted HTML code. Most of those are probably unnecessary (could be exploited only by person with write access to gitweb config, or at least access to the repository). This fixes CVE-2010-3906 Reported-by: Emanuele Gentili Helped-by: John 'Warthog9' Hawley Helped-by: Jonathan Nieder Signed-off-by: Jakub Narebski Signed-off-by: Junio C Hamano

Merge branch 'maint-1.6.3' into maint

2009-08-28T03:42:42Z

* maint-1.6.3: Fix overridable written with an extra 'e' Documentation: git-archive: mark --format as optional in summary Round-down years in "years+months" relative date view

Merge branch 'maint-1.6.2' into maint-1.6.3

2009-08-28T03:42:38Z

* maint-1.6.2: Fix overridable written with an extra 'e' Documentation: git-archive: mark --format as optional in summary Round-down years in "years+months" relative date view Conflicts: Documentation/git-archive.txt

Fix overridable written with an extra 'e'

2009-08-28T03:41:48Z

Signed-off-by: Nanako Shiraishi Signed-off-by: Junio C Hamano

Merge branch 'zf/maint-gitweb-acname' into maint

2009-08-21T18:34:17Z

* zf/maint-gitweb-acname: gitweb: parse_commit_text encoding fix

gitweb: parse_commit_text encoding fix

2009-08-05T19:37:13Z

Call to_utf8 when parsing author and committer names, otherwise they will appear with bad encoding if they written by using chop_and_escape_str. Signed-off-by: Zoltán Füzesi Signed-off-by: Junio C Hamano

gitweb/README: Document $base_url

2009-08-05T19:36:38Z

Signed-off-by: Jakub Narebski Signed-off-by: Junio C Hamano

gitweb: update Git homepage URL

2009-07-13T18:09:02Z

git-scm.com is now the "official" Git project page, having taken over from git.or.cz, so update the default link accordingly. This saves a redirect when people hit git.or.cz. Signed-off-by: Wincent Colaiuta Signed-off-by: Junio C Hamano

Merge branch 'gb/gitweb-avatar'

2009-07-09T08:00:59Z

* gb/gitweb-avatar: gitweb: add empty alt text to avatar img gitweb: picon avatar provider gitweb: gravatar url cache gitweb: (gr)avatar support gitweb: use git_print_authorship_rows in 'tag' view too gitweb: uniform author info for commit and commitdiff gitweb: refactor author name insertion

gitweb: add empty alt text to avatar img

2009-06-30T18:06:37Z

The empty alt text optimizes screen estate in text-only browsers. Signed-off-by: Giuseppe Bilotta Signed-off-by: Junio C Hamano