summaryrefslogtreecommitdiff
path: root/Documentation/user-manual.txt
diff options
context:
space:
mode:
authorLibravatar Jeff King <peff@peff.net>2017-07-28 15:28:55 -0400
committerLibravatar Junio C Hamano <gitster@pobox.com>2017-07-28 15:54:55 -0700
commitaeeb2d496859419ac1ba1da1162d6f3610f7f1f3 (patch)
tree844124df0896caa172359b472bf436c8d13be969 /Documentation/user-manual.txt
parentconnect: reject dashed arguments for proxy commands (diff)
downloadtgif-aeeb2d496859419ac1ba1da1162d6f3610f7f1f3.tar.xz
connect: reject paths that look like command line options
If we get a repo path like "-repo.git", we may try to invoke "git-upload-pack -repo.git". This is going to fail, since upload-pack will interpret it as a set of bogus options. But let's reject this before we even run the sub-program, since we would not want to allow any mischief with repo names that actually are real command-line options. You can still ask for such a path via git-daemon, but there's no security problem there, because git-daemon enters the repo itself and then passes "." on the command line. Signed-off-by: Jeff King <peff@peff.net> Reviewed-by: Jonathan Nieder <jrnieder@gmail.com> Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'Documentation/user-manual.txt')
0 files changed, 0 insertions, 0 deletions