Max Spicer wrote:
> I've just discovered the tsvn: and svn: protocols that can be used to
> checkout or launch the repos browser respectively. It would be really
> great if this could be extended to allow the passing of commands as
> options. What I'd really like to do is to be able to craft an url that
> when clicked in a browser would automatically launch the log viewer for
> a particular revision.
>
> e.g.
>
> tsvn:http://svn/repos/mainproject/trunk?command=log&revstart=5332&revend=5332
>
> Note that this uses the same format as the command line args.
>
> If this is a sane feature request, would you mind adding it to the list?
The problem with such an approach, while it may seem very easy to do and
also seem like a really nice feature is that it asks for trouble.
If you can execute any TSVN command by clicking on a link, some bad guys
could misuse it (and there are enough such bad guys and script kiddies
out there, believe me).
For example, with your approach, someone could make a link like this
tsvn:file:///c:/windows/*.*?command:remove
and hide that link with a picture, or even use a browser bug to execute
that link without user interaction.
I don't like the idea of having to check for every command and
possibility if it could be misused when passed with a link and then
deactivate it for links. What if I miss a command, what if I miss a
situation which could be bad?
If you want your users to be able to see a log, you can use other means
for that which are much better and also much less stress for your
repository:
http://search.cpan.org/~nikc/SVN-Web/lib/SVN/Web.pm
http://www.viewvc.org/
http://websvn.tigris.org/
http://insurrection.tigris.org/
http://www.horde.org/chora/
http://web-cpan.berlios.de/modules/SVN-RaWeb-Light/
http://www.akbkhome.com/blog.php/View/90/FlexySvn.html
http://www.osdevel.org/projects/show/16?lang=en
http://www.outoforder.cc/projects/apache/mod_svn_view/
Or if you like our own 'changelog' here:
http://mapcar.org/tsvn-snapshots/latest/changelog.html
and here:
http://mapcar.org/tsvn-snapshots/1.3.x/changelog.html
These were made with that little tool:
http://ch.tudelft.nl/~arthur/svn2cl/
Stefan
--
___
oo // \\ "De Chelonian Mobile"
(_,\/ \_/ \ TortoiseSVN
\ \_/_\_/> The coolest Interface to (Sub)Version Control
/_/ \_\ http://tortoisesvn.tigris.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: users-help@tortoisesvn.tigris.org
Received on Sat Apr 22 09:40:10 2006