This file is indexed.

/usr/lib/python2.7/dist-packages/graphite/templates/dashboard.html is in graphite-web 0.9.12+debian-6.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
<html>
  <head>
    <title>Graphite Dashboard</title>
    <link rel="stylesheet" type="text/css" href="/content/js/ext/resources/css/ext-all.css"/>
    <link rel="stylesheet" type="text/css" href="/content/css/dashboard.css"/>

    <script type="text/javascript">
    // Be overly cautious to prevent an unlikely XSS (See the below link rule 3.1):
    // https://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet
    var schemes = JSON.parse('{{ schemes_json|safe }}');
    var UI_CONFIG = JSON.parse('{{ ui_config_json|safe }}');
    var CONTEXT_FIELD_WIDTH = 220;
    var AUTOCOMPLETE_DELAY = UI_CONFIG.autocomplete_delay;
    var FINDER_QUERY_DELAY = 100;
    var NEW_DASHBOARD_REMOVE_GRAPHS = false;

    var RESIZE_ICON   = '/content/js/ext/examples/shared/icons/fam/cog_edit.png';
    var REMOVE_ICON   = '/content/js/ext/examples/shared/icons/fam/cross.gif';
    var REFRESH_ICON  = '/content/js/ext/examples/shared/icons/fam/table_refresh.png';
    var SHARE_ICON    = '/content/js/ext/examples/shared/icons/fam/application_go.png';
    var CALENDAR_ICON = '/content/js/ext/resources/images/default/shared/calendar.gif';
    var CLOCK_ICON    = '/content/img/clock_16.png';
    var HELP_ICON     = '/content/js/ext/examples/shared/icons/fam/information.png';

    {% if initialState %}
    var initialState = "{{ initialState|escapejs }}";
    {% else %}
    var initialState = null;
    {% endif %}

    {% if initialError %}
    var initialError = "{{ initialError|escapejs }}";
    {% else %}
    var initialError = null;
    {% endif %}

    {% if querystring %}
    var queryString = JSON.parse('{{ querystring|safe }}');
    {% endif %}
    </script>

    <!-- Theme overrides -->
    <link rel="stylesheet" type="text/css" href="/content/css/dashboard-{{ theme }}.css" />

    <script type="text/javascript" src="/content/js/ext/adapter/ext/ext-base{% if jsdebug %}-debug{% endif %}.js"></script>
    <script type="text/javascript" src="/content/js/ext/ext-all{% if jsdebug %}-debug{% endif %}.js"></script>
    <script type="text/javascript" src="/content/js/ext/ux/DataViewTransition.js"></script>
    <script type="text/javascript" src="/content/js/composer_widgets.js"></script>
    <script type="text/javascript" src="/content/js/dashboard.js"></script>
    <script type="text/javascript" src="/content/js/ace/ace.js"></script>
    <script type="text/javascript" src="/content/js/ace/mode-json.js"></script>
    <script type="text/javascript" src="/content/js/ace/theme-textmate.js"></script>

    <script type="text/javascript">
    Ext.BLANK_IMAGE_URL = '/content/js/ext/resources/images/default/s.gif';
    Ext.QuickTips.init();
    Ext.onReady(initDashboard);
    </script> 

  </head>
  <body>
    <div id='merge'>Drop To Merge</div>
  </body>
</html>