Mercurial > hg
diff tests/test-ssh.t @ 33643:00a75672a9cb stable
ssh: quote parameters using shellquote (SEC)
This patch uses shellquote to quote ssh parameters more strictly to avoid
shell injection.
author | Jun Wu <quark@fb.com> |
---|---|
date | Fri, 04 Aug 2017 23:54:12 -0700 |
parents | 616e788321cc |
children |
line wrap: on
line diff
--- a/tests/test-ssh.t Mon Jul 31 14:55:11 2017 -0700 +++ b/tests/test-ssh.t Fri Aug 04 23:54:12 2017 -0700 @@ -477,7 +477,7 @@ $ hg pull --debug ssh://user@dummy/remote pulling from ssh://user@dummy/remote - running python ".*/dummyssh" user@dummy ('|")hg -R remote serve --stdio('|") (re) + running python ".*/dummyssh" ['"]user@dummy['"] ('|")hg -R remote serve --stdio('|") (re) sending hello command sending between command remote: 355