Mercurial > hg
comparison tests/test-ssh-bundle1.t @ 33643:00a75672a9cb stable
ssh: quote parameters using shellquote (SEC)
This patch uses shellquote to quote ssh parameters more strictly to avoid
shell injection.
| author | Jun Wu <quark@fb.com> |
|---|---|
| date | Fri, 04 Aug 2017 23:54:12 -0700 |
| parents | aff7b32b3c05 |
| children |
comparison
equal
deleted
inserted
replaced
| 33642:ca398a50ca00 | 33643:00a75672a9cb |
|---|---|
| 459 | 459 |
| 460 debug output | 460 debug output |
| 461 | 461 |
| 462 $ hg pull --debug ssh://user@dummy/remote | 462 $ hg pull --debug ssh://user@dummy/remote |
| 463 pulling from ssh://user@dummy/remote | 463 pulling from ssh://user@dummy/remote |
| 464 running python ".*/dummyssh" user@dummy ('|")hg -R remote serve --stdio('|") (re) | 464 running python ".*/dummyssh" ['"]user@dummy['"] ('|")hg -R remote serve --stdio('|") (re) |
| 465 sending hello command | 465 sending hello command |
| 466 sending between command | 466 sending between command |
| 467 remote: 355 | 467 remote: 355 |
| 468 remote: capabilities: lookup changegroupsubset branchmap pushkey known getbundle unbundlehash batch streamreqs=generaldelta,revlogv1 bundle2=HG20%0Achangegroup%3D01%2C02%0Adigests%3Dmd5%2Csha1%2Csha512%0Aerror%3Dabort%2Cunsupportedcontent%2Cpushraced%2Cpushkey%0Ahgtagsfnodes%0Alistkeys%0Apushkey%0Aremote-changegroup%3Dhttp%2Chttps unbundle=HG10GZ,HG10BZ,HG10UN | 468 remote: capabilities: lookup changegroupsubset branchmap pushkey known getbundle unbundlehash batch streamreqs=generaldelta,revlogv1 bundle2=HG20%0Achangegroup%3D01%2C02%0Adigests%3Dmd5%2Csha1%2Csha512%0Aerror%3Dabort%2Cunsupportedcontent%2Cpushraced%2Cpushkey%0Ahgtagsfnodes%0Alistkeys%0Apushkey%0Aremote-changegroup%3Dhttp%2Chttps unbundle=HG10GZ,HG10BZ,HG10UN |
| 469 remote: 1 | 469 remote: 1 |