Link's href in rev panel are not escaped
Created originally on Bitbucket by muxator
Setting a value in changeset.link
in hgrc
alllows TortoiseHg to generate an hyperlink to a webpage containing that commit.
But no validation or escaping is done on the value of changeset.link
: it is simply embedded in the href
of the generated link.
To seean example,set this in your hgrc:
changeset.link = https://www.google.com/">SOMETHING
The quote and the closing tag have the effect shown in the attached screenshot.
I am going to send a patch to the mailing list, since the fix is composed of many commits, and fixing this is preparatory work for a feature I wish to implement.
Attachments: bug-thg