hgweb: correctly validate permissions with streamclone pulling
authorBenoit Boissinot <benoit.boissinot@ens-lyon.org>
Mon, 26 May 2008 14:20:26 +0200
changeset 6630 8542fac26f63
parent 6629 1afb186d2934
child 6631 a2b13cac0922
hgweb: correctly validate permissions with streamclone pulling
mercurial/hgweb/protocol.py
--- a/mercurial/hgweb/protocol.py	Sun May 25 14:05:35 2008 -0700
+++ b/mercurial/hgweb/protocol.py	Mon May 26 14:20:26 2008 +0200
@@ -224,5 +224,7 @@
         os.unlink(tempname)
 
 def stream_out(web, req):
+    if not web.allowpull:
+        return
     req.respond(HTTP_OK, HGTYPE)
     streamclone.stream_out(web.repo, req, untrusted=True)