[issue1712] RuntimeError: No hgweb templates found in...

[Etienne Robillard]

New submission from Etienne Robillard <robillard.etienne at gmail.com>:

some dude used a "%20" character to forge a bad request on a running hgwebdir
fastcgi script. here's the full traceback: 

2009/06/21 12:47:37 [error] 21692#0: *4137 FastCGI sent in stderr: "Traceback
(most recent call last):
  File "build/bdist.linux-i686/egg/flup/server/fcgi_base.py", line 558, in run
    protocolStatus, appStatus = self.server.handler(self)
  File "build/bdist.linux-i686/egg/flup/server/fcgi_base.py", line 1116, in handler
    result = self.application(environ, start_response)
  File
"/usr/local/lib/python2.6/site-packages/mercurial-unknown-py2.6-linux-i686.egg/mercurial/hgweb/request.py",
line 133, in run_wsgi
    return application(env, respond)
  File
"/usr/local/lib/python2.6/site-packages/mercurial-unknown-py2.6-linux-i686.egg/mercurial/hgweb/hgwebdir_mod.py",
line 91, in __call__
    return self.run_wsgi(req)
  File
"/usr/local/lib/python2.6/site-packages/mercurial-unknown-py2.6-linux-i686.egg/mercurial/hgweb/hgwebdir_mod.py",
line 148, in run_wsgi
    return hgweb(repo).run_wsgi(req)
  File
"/usr/local/lib/python2.6/site-packages/mercurial-unknown-py2.6-linux-i686.egg/mercurial/hgweb/hgweb_mod.py",
line 163, in run_wsgi
    tmpl = self.templater(req)
  File
"/usr/local/lib/python2.6/site-packages/mercurial-unknown-py2.6-linux-i686.egg/mercurial/hgweb/hgweb_mod.py",
line 241, in templater
    mapfile = style_map(self.templatepath, style)
  File
"/usr/local/lib/python2.6/site-packages/mercurial-unknown-py2.6-linux-i686.egg/mercurial/hgweb/common.py",
line 98, in style_map
    raise RuntimeError("No hgweb templates found in %r" % templatepath)
RuntimeError: No hgweb templates found in
['/usr/local/lib/python2.6/site-packages/mercurial-unknown-py2.6-linux-i686.egg/mercurial/templates']"
while reading response header from upstream, client: 190.140.249.169, server:
joelia.gthc.org, request: "GET /notmm/0.2.12/%20notmm-0.2.12-dev HTTP/1.1",
upstream: "fastcgi://127.0.0.1:8809", host: example.com

Is there a fix or a known workaround ?

Thanks,
Etienne

----------
messages: 9780
nosy: erob
priority: bug
status: chatting
title: RuntimeError: No hgweb templates found in...
topic: hgweb, security

____________________________________________________
Mercurial issue tracker <mercurial-bugs at selenic.com>
<http://mercurial.selenic.com/bts/issue1712>
____________________________________________________