config doc: elaborate on fetch.fsckObjects security
commit720dae5a19074e404224c9051152d7c64ba2acf0
authorÆvar Arnfjörð Bjarmason <avarab@gmail.com>
Fri, 27 Jul 2018 14:37:15 +0000 (27 14:37 +0000)
committerJunio C Hamano <gitster@pobox.com>
Fri, 27 Jul 2018 18:36:05 +0000 (27 11:36 -0700)
tree31980f09018f65d80e33957c510a8cbab1f5e2d5
parent456bab87b2e5e698f1024df7a79a76627b4bdb32
config doc: elaborate on fetch.fsckObjects security

Change the transfer.fsckObjects documentation to explicitly note the
unique security and/or corruption issues fetch.fsckObjects suffers
from, since it doesn't have a quarantine environment.

This was already alluded to in the existing documentation, but let's
spell it out so there's no confusion here, and give a concrete example
of how to work around this limitation.

Let's also prominently note that this is considered to be a limitation
of the current implementation, rather than something that's intended
and by design, since we might change this in the future.

See
https://public-inbox.org/git/20180531060259.GE17344@sigill.intra.peff.net/
for further details.

Signed-off-by: Ævar Arnfjörð Bjarmason <avarab@gmail.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Documentation/config.txt