Mercurial > hg
comparison tests/test-ssh.t @ 33659:8cb9e921ef8c stable
ssh: quote parameters using shellquote (SEC)
This patch uses shellquote to quote ssh parameters more strictly to avoid
shell injection.
author | Jun Wu <quark@fb.com> |
---|---|
date | Fri, 04 Aug 2017 23:54:12 -0700 |
parents | 72f051f9a7d8 |
children | 10e162bb9bf5 |
comparison
equal
deleted
inserted
replaced
33658:db83a1df03fe | 33659:8cb9e921ef8c |
---|---|
475 | 475 |
476 debug output | 476 debug output |
477 | 477 |
478 $ hg pull --debug ssh://user@dummy/remote | 478 $ hg pull --debug ssh://user@dummy/remote |
479 pulling from ssh://user@dummy/remote | 479 pulling from ssh://user@dummy/remote |
480 running .* ".*/dummyssh" user@dummy ('|")hg -R remote serve --stdio('|") (re) | 480 running .* ".*/dummyssh" ['"]user@dummy['"] ('|")hg -R remote serve --stdio('|") (re) |
481 sending hello command | 481 sending hello command |
482 sending between command | 482 sending between command |
483 remote: 355 | 483 remote: 355 |
484 remote: capabilities: lookup changegroupsubset branchmap pushkey known getbundle unbundlehash batch streamreqs=generaldelta,revlogv1 bundle2=HG20%0Achangegroup%3D01%2C02%0Adigests%3Dmd5%2Csha1%2Csha512%0Aerror%3Dabort%2Cunsupportedcontent%2Cpushraced%2Cpushkey%0Ahgtagsfnodes%0Alistkeys%0Apushkey%0Aremote-changegroup%3Dhttp%2Chttps unbundle=HG10GZ,HG10BZ,HG10UN | 484 remote: capabilities: lookup changegroupsubset branchmap pushkey known getbundle unbundlehash batch streamreqs=generaldelta,revlogv1 bundle2=HG20%0Achangegroup%3D01%2C02%0Adigests%3Dmd5%2Csha1%2Csha512%0Aerror%3Dabort%2Cunsupportedcontent%2Cpushraced%2Cpushkey%0Ahgtagsfnodes%0Alistkeys%0Apushkey%0Aremote-changegroup%3Dhttp%2Chttps unbundle=HG10GZ,HG10BZ,HG10UN |
485 remote: 1 | 485 remote: 1 |