| commit | e91490220686fb7f772e4f91e5a9f5a0ee663110 | |
| author | Kyle J. McKay <mackyle@gmail.com> | |
| Sat, 6 Jul 2013 04:50:10 +0000 (5 21:50 -0700) | ||
| committer | Kyle J. McKay <mackyle@gmail.com> | |
| Mon, 8 Jul 2013 09:43:00 +0000 (8 02:43 -0700) | ||
| tree | e97457673389d6235ed1ff0faf3a9bb1f0de0f3c | treesnapshot (tar.gz zip) |
| parent | ceb16dfa37ee3a302c97788777fe17c09605af20 | commitdiff |
Stay inside the current URL scheme
If the web server is configured to serve the Girocco/gitweb pages
over both http and https, then previously the full URL configured
as $Girocco::Config::webadmurl, $Girocco::Config::gitweburl,
$Girocco::Config::gitwebfiles and $Girocco::Config::htmlurl would
be embedded in any href=/src= links in pages being served up via
the web server.
This means that if the Girocco::Config values use 'http:' then
web pages viewed using 'https:' would tend to escape to 'http:'
and vice versa.
Instead only embed the full URL path, but not the scheme or
host part so that escape does not occur.
If the web server is configured to serve the Girocco/gitweb pages
over both http and https, then previously the full URL configured
as $Girocco::Config::webadmurl, $Girocco::Config::gitweburl,
$Girocco::Config::gitwebfiles and $Girocco::Config::htmlurl would
be embedded in any href=/src= links in pages being served up via
the web server.
This means that if the Girocco::Config values use 'http:' then
web pages viewed using 'https:' would tend to escape to 'http:'
and vice versa.
Instead only embed the full URL path, but not the scheme or
host part so that escape does not occur.
14 files changed: