mirrors/jgit - jgit - source @ dussan.org

Verlauf

Robin Rosenberg 42d7565ba9 Validate paths during DirCheckout DirCacheCheckout and CanonicalTreeParser cooperate. CanonicalTreeParser can detect malformed, potentially malicious tree entries and sets a flag, while DirCacheCheckout refuses to work with such paths. Malicious tree entries are ".", "..", ".git" (case insensitive), any name containing '/' and (on Windows '\') and also (on Windows) any paths ending in a combination of '.' or space or containing a ':'. We also forbid all special names like "con" etc on Windows. Some of the test can execute on any platform by enabling partial platform emulation. A new runtime exception, InvalidPathException, is introduced. For backwards compatibility it extends InvalidArgumentException. Change-Id: I86199105814b63d4340e5de0e471d0da6b579ead Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>		vor 12 Jahren
..
.settings	Enforce the use of Java5 API:s only (with a few exceptions)	vor 12 Jahren
META-INF	Prepare 2.0.0-SNAPSHOT builds	vor 12 Jahren
src/org/eclipse/jgit/junit	Validate paths during DirCheckout	vor 12 Jahren
.classpath	Partial revert "Switch build to Apache Felix maven-bundle-plugin"	vor 14 Jahren
.gitignore	Finish removing Apache Felix maven-bundle-plugin	vor 14 Jahren
.project	Enforce the use of Java5 API:s only (with a few exceptions)	vor 12 Jahren
build.properties	Partial revert "Switch build to Apache Felix maven-bundle-plugin"	vor 14 Jahren
plugin.properties	Remove incubation marker	vor 13 Jahren
pom.xml	Prepare 2.0.0-SNAPSHOT builds	vor 12 Jahren