[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Using the tsvn: protocol to launch the log viewer

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: 2006-04-22 09:39:55 CEST

Max Spicer wrote:
> I've just discovered the tsvn: and svn: protocols that can be used to
> checkout or launch the repos browser respectively. It would be really
> great if this could be extended to allow the passing of commands as
> options. What I'd really like to do is to be able to craft an url that
> when clicked in a browser would automatically launch the log viewer for
> a particular revision.
> e.g.
> tsvn:http://svn/repos/mainproject/trunk?command=log&revstart=5332&revend=5332
> Note that this uses the same format as the command line args.
> If this is a sane feature request, would you mind adding it to the list?

The problem with such an approach, while it may seem very easy to do and
also seem like a really nice feature is that it asks for trouble.
If you can execute any TSVN command by clicking on a link, some bad guys
could misuse it (and there are enough such bad guys and script kiddies
out there, believe me).
For example, with your approach, someone could make a link like this
and hide that link with a picture, or even use a browser bug to execute
that link without user interaction.
I don't like the idea of having to check for every command and
possibility if it could be misused when passed with a link and then
deactivate it for links. What if I miss a command, what if I miss a
situation which could be bad?

If you want your users to be able to see a log, you can use other means
for that which are much better and also much less stress for your


Or if you like our own 'changelog' here:
and here:
These were made with that little tool:


   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.tigris.org
To unsubscribe, e-mail: users-unsubscribe@tortoisesvn.tigris.org
For additional commands, e-mail: users-help@tortoisesvn.tigris.org
Received on Sat Apr 22 09:40:10 2006

This is an archived mail posted to the TortoiseSVN Users mailing list.