- Aug 05, 2011
-
-
Patrick Mezard authored
urllib2 password manager does not strip credentials from URIs registered with add_password() and compare them with stripped URIs in find_password(). Remove credentials from URIs returned by util.url.authinfo(). It sometimes works when no port was specified as the URI host is registered too.
-
- Aug 04, 2011
-
-
Idan Kamara authored
Previously aliases that overrode existing commands would wrap the old alias on every call to dispatch() (twice actually), which is an obvious re-entrancy issue for things like the command server or TortoiseHG.
-
file:///c:/foo/bar/kiilerix authored
28edd65000d9 made sure that paths that seemed to start with a windows drive letter would not get an extra leading slash. localpath should thus not try to handle this case by removing a leading slash, and this special handling is thus removed. (The localpath handling of this case was wrong anyway, because paths that look like they start with a windows drive letter can't have a leading slash.) A quick verification of this is to run 'hg id file:///c:/foo/bar/'.
-
- Aug 01, 2011
-
-
Matt Mackall authored
-
Matt Mackall authored
-
Patrick Mezard authored
The [auth] section was ignored when handling URLs like: http://user@example.com/foo Instead, we look in [auth] for an entry matching the URL and supplied user name. Entries without username can match URL with a username. Prefix length ties are resolved in favor of entries matching the username. With: foo.prefix = http://example.org foo.username = user foo.password = password bar.prefix = http://example.org/bar and the input URL: http://user@example.org/bar the 'bar' entry will be selected because of prefix length, therefore prompting for a password. This behaviour ensure that entries selection is consistent when looking for credentials or for certificates, and that certificates can be picked even if their entries do no define usernames while the URL does. Additionally, entries without a username matched against a username are returned as if they did have requested username set to avoid prompting again for a username if the password is not set. v2: reparse the URL in readauthforuri() to handle HTTP and HTTPS similarly. v3: allow unset usernames to match URL usernames to pick certificates. Resolve prefix length ties in favor of entries with usernames.
-
- Jul 30, 2011
-
-
Matt Mackall authored
Before: hgweb made it possible to download file content with a content type detected from the file extension. It would serve .html files as text/html and could thus cause XSS vulnerabilities if the web site had any kind of session authorization and the repository content wasn't fully trusted. Now: all files default to "application/binary", which all important browsers will refuse to treat as text/html. See the table here: https://code.google.com/p/browsersec/wiki/Part2#Survey_of_content_sniffing_behaviors
-
- Aug 01, 2011
-
-
wujek authored
-
Idan Kamara authored
-
Matt Mackall authored
-
- Jul 31, 2011
-
-
Katsunori FUJIWARA authored
-
- Jul 30, 2011
-
-
Jens Bäckman authored
-
- Jul 28, 2011
-
-
Vasily Titskiy authored
-
- Jul 30, 2011
-
-
Idan Kamara authored
it may have been replaced, see https://bitbucket.org/tortoisehg/thg/issue/937
-
Idan Kamara authored
So if a user has verbose=True somewhere in his .hgrc files, giving -q on the command line will override that. This basically reverts 1b8c70c9f47c.
-
- Jul 27, 2011
-
-
Augie Fackler authored
Some proxies strip the expect header because they forward requests in a non-compliant way or as a way to defend against bogus clients.
-
- Jul 29, 2011
-
-
Augie Fackler authored
-
Andrei Vermel authored
-
- Jul 31, 2011
-
-
Benoit Boissinot authored
-
- Jul 27, 2011
-
-
Andrew Pritchard authored
This fixes (issue2907) a crash when using 'hg incoming --bundle' with an empty remote repo and a non-empty local repo. This also fixes an unreported bug that 'hg summary --remote' erroneously reports incoming changes when the remote repo is empty and the local is not. Also, add a test to make sure issue2907 stays fixed
-
- Jul 28, 2011
-
-
Katsunori FUJIWARA authored
Some character sets, cp932 (known as Shift-JIS for Japanese) for example, use 0x41('A') - 0x5A('Z') and 0x61('a') - 0x7A('z') as second or later character. In such character set, case collision checking recognizes different files as CASEFOLDED same file, if filenames are treated as byte sequence. win32mbcs extension is not appropriate to handle this problem, because this problem can occur on other than Windows platform only if problematic character set is used. Callers of util.checkcase() use known ASCII filenames as last component of path, and string.lower() is not applied to directory part of path. So, util.checkcase() is kept intact, even though it applies string.lower() to filenames.
-
- Jul 22, 2011
-
-
Wagner Bruna authored
-
Wagner Bruna authored
-
- Jul 21, 2011
-
-
Augie Fackler authored
-
- Jul 22, 2011
-
-
Lee Cantey authored
-
file:///c:/foo/bar/Matt Mackall authored
-
- Jul 21, 2011
-
-
David Golub authored
The use of %r in the format string caused Python to display Windows paths with double backslashes.
-
Matt Mackall authored
This will restore the pre-1.9 behavior.
-
- Jul 19, 2011
-
-
Kevin Bullock authored
If a subrepo has changed relative to the outer repo's substate, but the subrepo itself is clean, we don't need to commit in the subrepo.
-
- Jul 18, 2011
-
-
Stefano Tortarolo authored
Collapse and keepbranches should be blocked when there is more than one named branch on the branch that's going to be rebased.
-
- Jul 16, 2011
-
-
Idan Kamara authored
On Windows sys.stdout was being replaced with winstdout, which caused util.system() to redirect its output (due to 406b6d7bdcb9). That causes interactive tools (such as vim) to stop working.
-
- Jul 09, 2011
-
-
Idan Kamara authored
We need to make sure that python hooks I/O goes through the ui descriptors so it doesn't mess the command server protocol.
-
- Jul 15, 2011
-
-
Stefano Tortarolo authored
-
- Jul 14, 2011
-
-
Idan Kamara authored
The ui passed to server() is really repo.ui, that is it contains its local configuration as well. When running commands that use a different repo than the servers cached repo, we don't want to use that ui as the baseui for the new repo.
-
- Jul 15, 2011
-
-
Benoit Allard authored
-
Idan Kamara authored
-
- Jul 14, 2011
-
-
Matt Mackall authored
-
- Jul 05, 2011
-
-
Wagner Bruna authored
-
- Jul 13, 2011
-
-
Matt Mackall authored
-
Matt Mackall authored
-