| commit | 0b30965067e73b434cea46d3736adb65bfeea97c | |
| author | Kyle J. McKay <mackyle@gmail.com> | |
| Fri, 26 Dec 2014 04:44:45 +0000 (25 20:44 -0800) | ||
| committer | Kyle J. McKay <mackyle@gmail.com> | |
| Fri, 26 Dec 2014 04:44:45 +0000 (25 20:44 -0800) | ||
| tree | 79a6411af5809e0ef05f7b63d99e351344a09f63 | treesnapshot (tar.gz zip) |
| parent | c3057d35d4037b8d3d25701aa82ab1c768597888 | commitdiff |
git-*-verify: reject project names with leading _
Project names with a leading _ are already disallowed. However,
it may be desirable to store other items under $reporoot in a way
that is invisible to clients. If any of those items happened to
be a Git repository, it might still be fetchable. Avoid this by
checking for and denying any such attempt to access a project name
with a leading _ thereby making such names safe for use for
directories under $reporoot.
Project names with a leading _ are already disallowed. However,
it may be desirable to store other items under $reporoot in a way
that is invisible to clients. If any of those items happened to
be a Git repository, it might still be fetchable. Avoid this by
checking for and denying any such attempt to access a project name
with a leading _ thereby making such names safe for use for
directories under $reporoot.
| bin/git-http-backend-verify | diffblobblamehistory | |
| bin/git-shell-verify | diffblobblamehistory |