use untrusted settings in hgweb
The only exceptions are web.static and web.templates, since they can
be used to get any file that is readable by the user running the CGI
script.
Other options can be (ab)used to increase the use of the cpu
(allow_bz2) or of the bandwidth (server.uncompressed), but they're
trusted anyway.
include hg
recursive-include mercurial *.py
include hgweb.cgi hgwebdir.cgi
include hgeditor rewrite-log
include tests/README tests/*.py tests/test-*[a-z0-9] tests/*.out tests/*.bin
prune tests/*.err
include *.txt
include doc/README doc/Makefile doc/gendoc.py doc/*.txt doc/*.html doc/*.[0-9]
recursive-include templates *
recursive-include contrib *
recursive-include hgext *
include README
include CONTRIBUTORS
include COPYING
include Makefile
include MANIFEST.in
prune *.elc *.orig *.rej *~ *.o *.so *.pyc *.swp *.prof