hg.stevelosh.com > hg-review

review/web_templates/base.html @ ac324e064f82 

Don't give away the repo filesystem path in the web UI footer.

Now that we have a read-only mode people might want to expose the web UI to
the world.  We shouldn't display sensitive data on the pages any more.
author Steve Losh <steve@stevelosh.com>
date Sat, 27 Mar 2010 12:11:12 -0400
parents 6df093d9f238
children (none) 
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

{% import 'macros.html' as macros %}

<html>
    <head>
        <title>Reviewing {{ utils["basename"](datastore.target.root) }}{% block title %}{% endblock %}</title>
        <link rel="stylesheet" href="/media/aal.css" type="text/css" media="screen" />
        <link rel="stylesheet" href="/media/style.css" type="text/css" media="screen" />
        
        <script type="text/javascript" src="/media/jquery-1.4.2.min.js"></script>
        <script type="text/javascript" src="/media/ui.js"></script>
        <script type="text/javascript" src="/media/comments.js"></script>
    </head>
    
    <body>
        <div id="head-wrap">
            <h1>
                Reviewing
                <a href="/">
                    {{ utils["basename"](datastore.target.root) }}
                </a>
                {% block header %}{% endblock %}
            </h1>
        </div>
        <div id="content-wrap">
            {% if not read_only %}
                <div id="remote-wrap">
                    <span id="remote-push" class="remote-section">
                        <h3>Push comments to:</h3>
                        {% for name, path in datastore.repo.ui.configitems("paths") %}
                            <form action="/push/" method="post">
                                <input type="hidden" name="path" value="{{ name }}" />
                                <input type="submit" value="{{ name }}" />
                            </form>
                        {% endfor %}
                    </span>
                    <span id="remote-pull" class="remote-section">
                        <h3>Pull comments from:</h3>
                        {% for name, path in datastore.repo.ui.configitems("paths") %}
                            <form action="/pull/" method="post">
                                <input type="hidden" name="path" value="{{ name }}" />
                                <input type="submit" value="{{ name }}" />
                            </form>
                        {% endfor %}
                    </span>
                </div>
            {% endif %}
            <div id="main-wrap">
                {% block content %}{% endblock %}
            </div>
        </div>
        <div id="footer">
            <p>reviewing {{ utils["basename"](datastore.target.root) }} with <a href="http://bitbucket.org/sjl/hg-review/">hg-review</a></p>
        </div>
    </body>
</html>