| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17767 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17710 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17654 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17650 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17639 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17637 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17627 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17604 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17475 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17451 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17378 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17352 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17323 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17287 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17267 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17247 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17163 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
|
|
|
|
|
| |
mercurial: work around faulty parsing of early command options
Use -sVALUE and --long=VALUE instead of "-s VALUE" and "--long VALUE"
respectively.
Contributed by Yuya Nishihara.
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17068 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
|
|
|
|
|
|
| |
mercurial: separate command options and positional arguments with "--"
We don't have much problems here thanks to hgtarget(path) and CGI.escape(),
which prepends a repository path and encodes "=" character respectively, but
it's better to not rely on the side effect of these functions.
Contributed by Yuya Nishihara.
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17067 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
mercurial: reject malicious command argument
We've got a security report from the Phabricator team, which basically says
--config and --debugger arguments can be injected anywhere to lead to an
arbitrary command execution.
https://secure.phabricator.com/rPa7921a4448093d00defa8bd18f35b8c8f8bf3314
This is a fundamental issue of the argument parsing rules in Mercurial, which
allows extensions to populate their parsing rules and such extensions can be
loaded by "--config extensions.<name>=". There's a chicken and egg problem.
We're working on hardening the parsing rules, but which won't come in by
default as it would be a behavior change.
This patch adds a verification to reject malicious command arguments as a
last ditch. The subsequent patches will fix the problem in more appropriate
way.
Contributed by Yuya Nishihara.
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17066 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17028 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@17005 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
git: remove "--no-color" option from "git --version" for git 2.14 compatibility.
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@16949 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@16826 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@16780 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/branches/3.4-stable@16696 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@16685 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@16675 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
|
|
| |
(#26157).
Patch by Holger Just.
git-svn-id: http://svn.redmine.org/redmine/trunk@16668 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Patch by Jens Krämer.
git-svn-id: http://svn.redmine.org/redmine/trunk@16667 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Contributed by Jens Krämer.
git-svn-id: http://svn.redmine.org/redmine/trunk@16663 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@16644 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Patch by Felix Gliesche.
git-svn-id: http://svn.redmine.org/redmine/trunk@16643 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Patch by Felix Schäfer.
git-svn-id: http://svn.redmine.org/redmine/trunk@16639 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Patch by Felix Schäfer.
git-svn-id: http://svn.redmine.org/redmine/trunk@16637 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Patch by Marius BALTEANU.
git-svn-id: http://svn.redmine.org/redmine/trunk@16636 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
|
|
| |
(#26055).
Patch by Mischa The Evil.
git-svn-id: http://svn.redmine.org/redmine/trunk@16624 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Patch by Mischa The Evil.
git-svn-id: http://svn.redmine.org/redmine/trunk@16623 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Patch by Mischa The Evil.
git-svn-id: http://svn.redmine.org/redmine/trunk@16622 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@16604 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@16595 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@16574 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Patch by Go MAEDA.
git-svn-id: http://svn.redmine.org/redmine/trunk@16568 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@16532 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
|
|
|
| |
* Disallow setting arbitrary classes and ids via Textile syntax
* Only allow valid/supported languages for syntax highlighted code blocks
Patch by Jan Schulz-Hofen.
git-svn-id: http://svn.redmine.org/redmine/trunk@16502 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Patch by Jan Schulz-Hofen.
git-svn-id: http://svn.redmine.org/redmine/trunk@16501 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
|
|
| |
Patch by Jan Schulz-Hofen.
git-svn-id: http://svn.redmine.org/redmine/trunk@16500 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@16475 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@16473 e93f8b46-1217-0410-a6f0-8f06a7374b81
|
|
|
|
| |
git-svn-id: http://svn.redmine.org/redmine/trunk@16445 e93f8b46-1217-0410-a6f0-8f06a7374b81
|