Mercurial > hg
comparison tests/test-schemes.t @ 29051:a56296f55a5e stable 3.8.1
convert: pass absolute paths to git (SEC)
Fixes CVE-2016-3105 (1/1).
Previously, it was possible for the repository path passed to git-ls-remote
to be misinterpreted as a URL.
Always passing an absolute path to git is a simple way to avoid this.
| author | Blake Burkhart <bburky@bburky.com> |
|---|---|
| date | Wed, 06 Apr 2016 22:57:46 -0500 |
| parents | bf1d5c223ac0 |
| children | 393e44324037 |
comparison
equal
deleted
inserted
replaced
| 29050:27ad6cae7785 | 29051:a56296f55a5e |
|---|