mirrors/jgit - jgit - source @ dussan.org

History

Robin Rosenberg 42d7565ba9 Validate paths during DirCheckout DirCacheCheckout and CanonicalTreeParser cooperate. CanonicalTreeParser can detect malformed, potentially malicious tree entries and sets a flag, while DirCacheCheckout refuses to work with such paths. Malicious tree entries are ".", "..", ".git" (case insensitive), any name containing '/' and (on Windows '\') and also (on Windows) any paths ending in a combination of '.' or space or containing a ':'. We also forbid all special names like "con" etc on Windows. Some of the test can execute on any platform by enabling partial platform emulation. A new runtime exception, InvalidPathException, is introduced. For backwards compatibility it extends InvalidArgumentException. Change-Id: I86199105814b63d4340e5de0e471d0da6b579ead Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>		12 years ago
..
.settings	Enforce the use of Java5 API:s only (with a few exceptions)	12 years ago
META-INF	Prepare 2.0.0-SNAPSHOT builds	12 years ago
src/org/eclipse/jgit/junit	Validate paths during DirCheckout	12 years ago
.classpath	Partial revert "Switch build to Apache Felix maven-bundle-plugin"	14 years ago
.gitignore	Finish removing Apache Felix maven-bundle-plugin	14 years ago
.project	Enforce the use of Java5 API:s only (with a few exceptions)	12 years ago
build.properties	Partial revert "Switch build to Apache Felix maven-bundle-plugin"	14 years ago
plugin.properties	Remove incubation marker	13 years ago
pom.xml	Prepare 2.0.0-SNAPSHOT builds	12 years ago