intersystems
diff --git a/‎.gitignore
Lines changed: 1 addition & 2 deletions b/‎.gitignore
Lines changed: 1 addition & 2 deletions
diff --git a/‎CHANGELOG.md
Lines changed: 9 additions & 0 deletions b/‎CHANGELOG.md
Lines changed: 9 additions & 0 deletions
diff --git a/‎cls/SourceControl/Git/WebUIDriver.cls
Lines changed: 24 additions & 3 deletions b/‎cls/SourceControl/Git/WebUIDriver.cls
Lines changed: 24 additions & 3 deletions
@@ -1,4 +1,3 @@
 .vscode/
 .gitattributes
-*.code-workspace
-package-lock.json
+*.code-workspace
@@ -5,6 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.0.5] - Unreleased
+
+### Fixed
+- Tree/Commit links don't navigate
+- Slashes present in tree view
+
+### Security
+- File contents are properly escaped in tree view
+
 ## [2.0.4] - 2022-10-05
 
 ### Fixed
 
@@ -37,9 +37,29 @@ ClassMethod HandleRequest(pagePath As %String, InternalName As %String = "", Out
             */
             if (pathStart = "git") {
                 if $piece(pagePath,"/",3) = "cat-file" {
-                    set file = $piece(pagePath,"/",4,*)
-                    do ##class(SourceControl.Git.Utils).RunGitCommand("-c",,.%data,"color.ui=false","cat-file","-p",file)
-                    do ##class(SourceControl.Git.Change).RefreshUncommitted()
+                    set blob = $piece(pagePath,"/",4)
+                    set name = $Piece(pagePath,"/",*)
+                    do ##class(SourceControl.Git.Utils).RunGitCommand("-c",,.rawData,"color.ui=false","cat-file","-p",blob)
+                    // TODO: Support binary file types properly. This will need some deeper client-side changes.
+                    /*
+                    do ##class(%CSP.StreamServer).FileClassify($Piece(name,".",*),.type,.bin,.charset)
+                    set %response.ContentType = type
+                    if ($Get(charset) = "") {
+                        set %response.NoCharSetConvert = 1
+                    }
+                    if bin {
+                        set %data = rawData
+                    } else {
+                    */
+                    // Render HTML stream in a <pre> with text file contents HTML-escaped.
+                    set %data = ##class(%Stream.TmpBinary).%New()
+                    do %data.Write("<html><body><pre>")
+                    do rawData.Rewind()
+                    while 'rawData.AtEnd {
+                        do %data.Write($ZConvert(rawData.Read(),"O","HTML"))
+                    }
+                    do %data.Write("</pre></body></html>")
+                    //}
                     set handled = 1
                 }
             } elseif (pathStart = "hostname") {
@@ -198,3 +218,4 @@ ClassMethod GetSettingsURL(%request As %CSP.Request) As %SystemBase
 }
 
 }
+