Mercurial > hg
comparison tests/test-ssh-bundle1.t @ 33643:00a75672a9cb stable
ssh: quote parameters using shellquote (SEC)
This patch uses shellquote to quote ssh parameters more strictly to avoid
shell injection.
author | Jun Wu <quark@fb.com> |
---|---|
date | Fri, 04 Aug 2017 23:54:12 -0700 |
parents | aff7b32b3c05 |
children |
comparison
equal
deleted
inserted
replaced
33642:ca398a50ca00 | 33643:00a75672a9cb |
---|---|
459 | 459 |
460 debug output | 460 debug output |
461 | 461 |
462 $ hg pull --debug ssh://user@dummy/remote | 462 $ hg pull --debug ssh://user@dummy/remote |
463 pulling from ssh://user@dummy/remote | 463 pulling from ssh://user@dummy/remote |
464 running python ".*/dummyssh" user@dummy ('|")hg -R remote serve --stdio('|") (re) | 464 running python ".*/dummyssh" ['"]user@dummy['"] ('|")hg -R remote serve --stdio('|") (re) |
465 sending hello command | 465 sending hello command |
466 sending between command | 466 sending between command |
467 remote: 355 | 467 remote: 355 |
468 remote: capabilities: lookup changegroupsubset branchmap pushkey known getbundle unbundlehash batch streamreqs=generaldelta,revlogv1 bundle2=HG20%0Achangegroup%3D01%2C02%0Adigests%3Dmd5%2Csha1%2Csha512%0Aerror%3Dabort%2Cunsupportedcontent%2Cpushraced%2Cpushkey%0Ahgtagsfnodes%0Alistkeys%0Apushkey%0Aremote-changegroup%3Dhttp%2Chttps unbundle=HG10GZ,HG10BZ,HG10UN | 468 remote: capabilities: lookup changegroupsubset branchmap pushkey known getbundle unbundlehash batch streamreqs=generaldelta,revlogv1 bundle2=HG20%0Achangegroup%3D01%2C02%0Adigests%3Dmd5%2Csha1%2Csha512%0Aerror%3Dabort%2Cunsupportedcontent%2Cpushraced%2Cpushkey%0Ahgtagsfnodes%0Alistkeys%0Apushkey%0Aremote-changegroup%3Dhttp%2Chttps unbundle=HG10GZ,HG10BZ,HG10UN |
469 remote: 1 | 469 remote: 1 |