![[tokkee]](http://tokkee.org/images/avatar.png){kind=avatar}
| author | Jakub Narebski <jnareb@gmail.com> | |
| Mon, 30 Oct 2006 21:29:06 +0000 (22:29 +0100) | ||
| committer | Junio C Hamano <junkio@cox.net> | |
| Wed, 1 Nov 2006 20:15:39 +0000 (12:15 -0800) | ||
| commit | 45bd0c808d2a89254ee50807a99b7cf1147aa6d7 | |
| tree | 7224d20bdca77306a448dc0ce64d2206bfe575e8 | tree | snapshot |
| parent | 5ad0828ca33e7af402466b0e04db16c014428d1a | commit | diff |
gitweb: Secure against commit-ish/tree-ish with the same name as path
Add "--" after <commit-ish> or <tree-ish> argument to clearly mark it
as <commit-ish> or <tree-ish> and not pathspec, securing against refs
with the same names as files or directories in [live] repository.
Some wrapping to reduce line length as well.
[jc: with "oops, ls-tree does not want --" fix-up manually applied.]
Signed-off-by: Jakub Narebski <jnareb@gmail.com>
Signed-off-by: Junio C Hamano <junkio@cox.net>
Add "--" after <commit-ish> or <tree-ish> argument to clearly mark it
as <commit-ish> or <tree-ish> and not pathspec, securing against refs
with the same names as files or directories in [live] repository.
Some wrapping to reduce line length as well.
[jc: with "oops, ls-tree does not want --" fix-up manually applied.]
Signed-off-by: Jakub Narebski <jnareb@gmail.com>
Signed-off-by: Junio C Hamano <junkio@cox.net>
| gitweb/gitweb.perl | diff | blob | history |