comparison hgext/__init__.py @ 47502:65c519661991 stable

stream: double check that self.vfs is *not* in the vfsmap The stream clone logic allows for writing any content to any file under various vfs. This is *not* suitable for *vfs*, since writing in `.hg/` directly allow to modify the configuration and is a great and simple gateway for remote code execution. Differential Revision: https://phab.mercurial-scm.org/D10905
author Pierre-Yves David <pierre-yves.david@octobus.net>
date Thu, 24 Jun 2021 03:22:03 +0200
parents 2372284d9457
children 6000f5b25c9b
comparison
equal deleted inserted replaced
47464:25d36300ba8e 47502:65c519661991