author | H. Peter Anvin <hpa@zytor.com> | |
Wed, 19 Oct 2005 07:01:01 +0000 (00:01 -0700) | ||
committer | Junio C Hamano <junkio@cox.net> | |
Wed, 19 Oct 2005 07:01:01 +0000 (00:01 -0700) | ||
commit | e51fd86ab320a2b8457653ba06d9f4ce9e92b4b1 | |
tree | 845e7ab5ef21f6abfee4124b05f8689d9fcac42a | tree | snapshot |
parent | 844ac7f81874f7acf22a15ffd985048d930c8341 | commit | diff |
revised^2: git-daemon extra paranoia, and path DWIM
This patch adds some extra paranoia to the git-daemon filename test. In
particular, it now rejects pathnames containing //; it also adds a
redundant test for pathname absoluteness (belts and suspenders.)
A single / at the end of the path is still permitted, however, and the
.git and /.git append DWIM stuff is now handled in an integrated manner,
which means the resulting path will always be subjected to pathname checks.
[jc: backported to 0.99.8 maintenance branch]
Signed-off-by: H. Peter Anvin <hpa@zytor.com>
Signed-off-by: Junio C Hamano <junkio@cox.net>
This patch adds some extra paranoia to the git-daemon filename test. In
particular, it now rejects pathnames containing //; it also adds a
redundant test for pathname absoluteness (belts and suspenders.)
A single / at the end of the path is still permitted, however, and the
.git and /.git append DWIM stuff is now handled in an integrated manner,
which means the resulting path will always be subjected to pathname checks.
[jc: backported to 0.99.8 maintenance branch]
Signed-off-by: H. Peter Anvin <hpa@zytor.com>
Signed-off-by: Junio C Hamano <junkio@cox.net>
daemon.c | diff | blob | history |