Mercurial > hg
comparison mercurial/help/config.txt @ 34988:bd725a71f274 stable
config: add some more documentation around why svn and git subrepos are off
| author | Augie Fackler <augie@google.com> |
|---|---|
| date | Mon, 06 Nov 2017 14:56:17 -0500 |
| parents | 846942fd6d15 |
| children | 1a314176da9c |
comparison
equal
deleted
inserted
replaced
| 34987:846942fd6d15 | 34988:bd725a71f274 |
|---|---|
| 1903 List of subrepository types (hg, git, svn) allowed in the working | 1903 List of subrepository types (hg, git, svn) allowed in the working |
| 1904 directory. | 1904 directory. |
| 1905 | 1905 |
| 1906 When disallowed, any commands including :hg:`update` will fail if | 1906 When disallowed, any commands including :hg:`update` will fail if |
| 1907 subrepositories are involved. | 1907 subrepositories are involved. |
| 1908 | |
| 1909 Security note: auditing in Mercurial is known to be insufficient | |
| 1910 to prevent clone-time code execution with carefully constructed | |
| 1911 Git subrepos. It is unknown if a similar defect is present in | |
| 1912 Subversion subrepos, so both are disabled by default out of an | |
| 1913 abundance of caution. Re-enable such subrepos via this setting | |
| 1914 with caution. | |
| 1908 (default: `hg`) | 1915 (default: `hg`) |
| 1909 | 1916 |
| 1910 ``templatealias`` | 1917 ``templatealias`` |
| 1911 ----------------- | 1918 ----------------- |
| 1912 | 1919 |