From 4ee8ea34e13b02a148ad417fff20e2fe9361382a Mon Sep 17 00:00:00 2001 From: cmpilato Date: Thu, 29 Mar 2007 02:07:27 +0000 Subject: [PATCH] * INSTALL (SECURITY INFORMATION): Update this with the latest information about the checkout view and how to toggle its enablement. git-svn-id: http://viewvc.tigris.org/svn/viewvc/trunk@1554 8cb11bc2-c004-0410-86c3-e597b4017df7 --- INSTALL | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/INSTALL b/INSTALL index f0c1253f..73f20aa9 100644 --- a/INSTALL +++ b/INSTALL @@ -96,15 +96,9 @@ Visitors viewing those versioned controlled documents get the malicious code, too, which might not be what the original author intended. -If you wish to disable ViewVC's "checkout" view which implements this -feature, you can do so by editing lib/viewvc.py, and modifying the -function view_checkout() like so, adding the lines indicated: - - def view_checkout(request): ->> raise debug.ViewVCException('Checkout view is disabled', ->> '403 Forbidden') - path, rev = _orig_path(request) - fp, revision = request.repos.openfile(path, rev) +For this reason, ViewVC's "checkout" view is disabled by default. If +you wish to enable it, simply add "co" to the list of views enabled in +the allowed_views configuration option. INSTALLING VIEWVC