X-Git-Url: https://git.ladys.computer/Gitweb/blobdiff_plain/3891c312591e6395757a0cde52b5581926a11bba8873fc741f2f90cc9c887f48..e771139931847d281490f87ee18d9f5f44b4be86a6a2f3cc2ac843f918085179:/gitweb.cgi
diff --git a/gitweb.cgi b/gitweb.cgi
index bf09b76..69ae3b0 100755
--- a/gitweb.cgi
+++ b/gitweb.cgi
@@ -14,9 +14,10 @@ use CGI::Util qw(unescape);
use CGI::Carp qw(fatalsToBrowser);
use Encode;
use Fcntl ':mode';
+binmode STDOUT, ':utf8';
my $cgi = new CGI;
-my $version = "250";
+my $version = "254";
my $my_url = $cgi->url();
my $my_uri = $cgi->url(-absolute => 1);
my $rss_link = "";
@@ -79,8 +80,8 @@ if (defined $project) {
undef $project;
die_error(undef, "No such project.");
}
- $rss_link = "";
+ $rss_link = "";
$ENV{'GIT_DIR'} = "$projectroot/$project";
} else {
git_project_list();
@@ -145,7 +146,7 @@ sub validate_input {
if ($input =~ m/(^|\/)(|\.|\.\.)($|\/)/) {
return undef;
}
- if ($input =~ m/[^a-zA-Z0-9_ \.\/\-\+\#\~]/) {
+ if ($input =~ m/[^a-zA-Z0-9_\x80-\xff\ \.\/\-\+\#\~\%]/) {
return undef;
}
return $input;
@@ -208,17 +209,31 @@ if (!defined $action || $action eq "summary") {
exit;
}
-sub esc_url {
+# quote unsafe chars, but keep the slash, even when it's not
+# correct, but quoted slashes look too horrible in bookmarks
+sub esc_param {
my $str = shift;
+ $str =~ s/([^A-Za-z0-9\-_.~();\/;?:@&=])/sprintf("%%%02X", ord($1))/eg;
$str =~ s/\+/%2B/g;
$str =~ s/ /\+/g;
return $str;
}
+# replace invalid utf8 character with SUBSTITUTION sequence
sub esc_html {
my $str = shift;
- $str = escapeHTML($str);
$str = decode("utf8", $str, Encode::FB_DEFAULT);
+ $str = escapeHTML($str);
+ return $str;
+}
+
+# git may return quoted and escaped filenames
+sub unquote {
+ my $str = shift;
+ if ($str =~ m/^"(.*)"$/) {
+ $str = $1;
+ $str =~ s/\\([0-7]{1,3})/chr(oct($1))/eg;
+ }
return $str;
}
@@ -302,11 +317,11 @@ a.rss_logo:hover { background-color:#ee5500; }
EOF
print "\n" .
" \n" .
@@ -684,7 +699,7 @@ sub format_log_line_html {
if ($line =~ m/([0-9a-fA-F]{40})/) {
my $hash_text = $1;
if (git_get_type($hash_text) eq "commit") {
- my $link = $cgi->a({-class => "text", -href => esc_url("$my_uri?p=$project;a=commit;h=$hash_text")}, $hash_text);
+ my $link = $cgi->a({-class => "text", -href => "$my_uri?" . esc_param("p=$project;a=commit;h=$hash_text")}, $hash_text);
$line =~ s/$hash_text/$link/;
}
}
@@ -718,6 +733,7 @@ sub date_str {
# git-logo (cached in browser for one day)
sub git_logo {
+ binmode STDOUT, ':raw';
print $cgi->header(-type => 'image/png', -expires => '+1d');
# cat git-logo.png | hexdump -e '16/1 " %02x" "\n"' | sed 's/ /\\x/g'
print "\x89\x50\x4e\x47\x0d\x0a\x1a\x0a\x00\x00\x00\x0d\x49\x48\x44\x52" .
@@ -832,25 +848,25 @@ sub git_project_list {
@projects = sort {$a->{'path'} cmp $b->{'path'}} @projects;
print "