security-problem!? possible information-leakage

Matt Mackall mpm at selenic.com
Sun Feb 18 20:51:39 UTC 2007


On Sun, Feb 18, 2007 at 02:04:19PM +0100, devzero at web.de wrote:
> Hello, 
> 
> i was trying to download a gzip snapshot from some mercurial repository. 
> this always worked without a problem with my webbrowser, but always failed with wget from commandline.
> so i wondered why it failed and also tried curl, another commandline utility for fetching web-content.
> 
> i got some weird error response which looks a little bit too "noisy".

That's from this in hgweb.cgi:

# send python tracebacks to the browser if an error occurs:
import cgitb
cgitb.enable()

-- 
Mathematics is the supreme nostalgia of our time.



More information about the Mercurial mailing list