diff options
author | Ivan Frade <ifrade@google.com> | 2018-10-01 13:44:00 -0700 |
---|---|---|
committer | Matthias Sohn <matthias.sohn@sap.com> | 2018-10-05 23:49:00 +0200 |
commit | e4c28665b60140f43e2caaa7926fa51e093682d5 (patch) | |
tree | 7b9c8200e2607021e54db84aaac55d8aea7153eb /org.eclipse.jgit.pgm | |
parent | 3ed3eafbd18054ce502969e212b1de34f1ffc776 (diff) | |
download | jgit-e4c28665b60140f43e2caaa7926fa51e093682d5.tar.gz jgit-e4c28665b60140f43e2caaa7926fa51e093682d5.zip |
BaseReceivePack: Validate incoming .gitmodules files
The main concern are submodule urls starting with '-' that could pass as
options to an unguarded tool.
Pass through the parser the ids of blobs identified as .gitmodules
files in the ObjectChecker. Load the blobs and parse/validate them
in SubmoduleValidator.
Change-Id: Ia0cc32ce020d288f995bf7bc68041fda36be1963
Signed-off-by: Ivan Frade <ifrade@google.com>
Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>
Diffstat (limited to 'org.eclipse.jgit.pgm')
0 files changed, 0 insertions, 0 deletions