summaryrefslogtreecommitdiffstats
path: root/org.eclipse.jgit.pgm
diff options
context:
space:
mode:
authorIvan Frade <ifrade@google.com>2018-10-01 13:44:00 -0700
committerMatthias Sohn <matthias.sohn@sap.com>2018-10-05 23:49:00 +0200
commite4c28665b60140f43e2caaa7926fa51e093682d5 (patch)
tree7b9c8200e2607021e54db84aaac55d8aea7153eb /org.eclipse.jgit.pgm
parent3ed3eafbd18054ce502969e212b1de34f1ffc776 (diff)
downloadjgit-e4c28665b60140f43e2caaa7926fa51e093682d5.tar.gz
jgit-e4c28665b60140f43e2caaa7926fa51e093682d5.zip
BaseReceivePack: Validate incoming .gitmodules files
The main concern are submodule urls starting with '-' that could pass as options to an unguarded tool. Pass through the parser the ids of blobs identified as .gitmodules files in the ObjectChecker. Load the blobs and parse/validate them in SubmoduleValidator. Change-Id: Ia0cc32ce020d288f995bf7bc68041fda36be1963 Signed-off-by: Ivan Frade <ifrade@google.com> Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>
Diffstat (limited to 'org.eclipse.jgit.pgm')
0 files changed, 0 insertions, 0 deletions