git/list[1] front-page[2] threads[3] people[4] search[5] about
 

[PATCHv2 0/2] gitweb: Make $prevent_xss protection for 'blob_plain' more usable

From
Jakub Narebski <jnareb@gmail.com>
Date
Jun 30, 2011, 09:39 UTC
Message-ID
<1309426761-819-1-git-send-email-jnareb@gmail.com>

This series is improvement and extending of patch with the same name, containing only the first patch in the series, sent to git mailing list on 10.06.2011, and present in 'pu' as fb76adb (jn/mime-type-with-params).

This series is to replace it.

The original impulse behind creating this series was the fact that the summary of previously sent commit was quite cryptic, and didn't really explain what it was intended to do. While at it I have added one more simplification on top of the one proposed by Junio.

The second path in this series is to have gitweb treat the same 'blob_plain' view of both *.xhtml (with application/xhtml+xml mimetype) and *.html (text/html), when $prevent_xss is on.

Jakub Narebski (2):
  gitweb: Serve text/*  'blob_plain' as text/plain with $prevent_xss
  gitweb: Serve */*+xml 'blob_plain' as text/plain with $prevent_xss
 gitweb/gitweb.perl |   11 ++++++++++-
 1 files changed, 10 insertions(+), 1 deletions(-)
-- 
1.7.5
Next: Jakub Narebski
Message 1 of 4 in “[PATCHv2 0/2] gitweb: Make $prevent_xss protection for 'blob_plain' more usable”
  1. Jakub NarebskiJun 30, 2011
  2. 1/2 gitweb: Serve text/* 'blob_plain' as text/plain with $prevent_xssJakub Narebski, Jun 30, 2011
  3. Junio C HamanoJun 30, 2011
  4. 2/2 gitweb: Serve */*+xml 'blob_plain' as text/plain with $prevent_xssJakub Narebski, Jun 30, 2011

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.