← Back to branch summary

~loggerhead-team/loggerhead/trunk-rich

« back to all changes in this revision

Viewing changes to __init__.py

  • Committer: William Grant
  • Date: 2011-03-24 23:02:29 UTC
  • mfrom: (441.1.7 xss-fix)
  • Revision ID: william.grant@canonical.com-20110324230229-zq85fy6aqvlyylbu
Improve escaping of filenames in revision views. Fixes a couple of XSS holes.

Show diffs side-by-side

added added

removed removed

Lines of Context:
__init__.py
62
62
            sys.path.append(os.path.dirname(__file__))
63
63
 
64
64
    def serve_http(transport, host=None, port=None, inet=None):
 
65
        # TODO: if we supported inet to pass requests in and respond to them,
 
66
        #       then it would be easier to test the full stack, but it probably
 
67
        #       means routing around paste.httpserver.serve which probably
 
68
        #       isn't testing the full stack
65
69
        from paste.httpexceptions import HTTPExceptionHandler
66
70
        from paste.httpserver import serve
67
71
 
68
72
        _ensure_loggerhead_path()
69
73
 
 
74
        from loggerhead.apps.http_head import HeadMiddleware
70
75
        from loggerhead.apps.transport import BranchesFromTransportRoot
71
76
        from loggerhead.config import LoggerheadConfig
72
77
        from loggerhead.main import setup_logging
81
86
        config = LoggerheadConfig(argv)
82
87
        setup_logging(config, init_logging=False, log_file=sys.stderr)
83
88
        app = BranchesFromTransportRoot(transport.base, config)
 
89
        app = HeadMiddleware(app)
84
90
        app = HTTPExceptionHandler(app)
85
91
        serve(app, host=host, port=port)
86
92