author | H. Peter Anvin <hpa@zytor.com> | |
Wed, 19 Oct 2005 01:26:52 +0000 (18:26 -0700) | ||
committer | Junio C Hamano <junkio@cox.net> | |
Wed, 19 Oct 2005 01:26:52 +0000 (18:26 -0700) | ||
commit | 3e04c62daab0a8481f907c30414ed246f284a1d9 | |
tree | 8dde448c56556960a665ca2a8d58458e3d318c95 | tree | snapshot |
parent | 5e5f8091e5c9b4f09ad4019c8fddbf25fd2ccbe9 | commit | diff |
revised^2: git-daemon extra paranoia, and path DWIM
This patch adds some extra paranoia to the git-daemon filename test. In
particular, it now rejects pathnames containing //; it also adds a
redundant test for pathname absoluteness (belts and suspenders.)
A single / at the end of the path is still permitted, however, and the
.git and /.git append DWIM stuff is now handled in an integrated manner,
which means the resulting path will always be subjected to pathname checks.
Signed-off-by: H. Peter Anvin <hpa@zytor.com>
Signed-off-by: Junio C Hamano <junkio@cox.net>
This patch adds some extra paranoia to the git-daemon filename test. In
particular, it now rejects pathnames containing //; it also adds a
redundant test for pathname absoluteness (belts and suspenders.)
A single / at the end of the path is still permitted, however, and the
.git and /.git append DWIM stuff is now handled in an integrated manner,
which means the resulting path will always be subjected to pathname checks.
Signed-off-by: H. Peter Anvin <hpa@zytor.com>
Signed-off-by: Junio C Hamano <junkio@cox.net>
daemon.c | diff | blob | history |