use untrusted settings in hgweb The only exceptions are web.static and web.templates, since they can be used to get any file that is readable by the user running the CGI script. Other options can be (ab)used to increase the use of the cpu (allow_bz2) or of the bandwidth (server.uncompressed), but they're trusted anyway.

     1

#!/bin/sh

     2

     3

hg init a

     4

cd a

     5

echo bar > foo

     6

hg add foo

     7

hg ci -m 'add foo' -d '1000000 0'

     8

     9

echo foobar > foo

    10

hg ci -m 'change foo' -d '1000001 0'

    11

    12

echo 'quiet:'

    13

hg --quiet diff -r 0 -r 1

    14

echo

    15

    16

echo 'normal:'

    17

hg diff -r 0 -r 1

    18

echo

    19

    20

echo 'verbose:'

    21

hg --verbose diff -r 0 -r 1

    22

echo

    23

    24

echo 'debug:'

    25

hg --debug diff -r 0 -r 1

    26

echo