diff tests/test-ssh.t @ 33659:8cb9e921ef8c stable

ssh: quote parameters using shellquote (SEC) This patch uses shellquote to quote ssh parameters more strictly to avoid shell injection.
author Jun Wu <quark@fb.com>
date Fri, 04 Aug 2017 23:54:12 -0700
parents 72f051f9a7d8
children 10e162bb9bf5
line wrap: on
line diff
--- a/tests/test-ssh.t	Mon Jul 31 14:55:11 2017 -0700
+++ b/tests/test-ssh.t	Fri Aug 04 23:54:12 2017 -0700
@@ -477,7 +477,7 @@
 
   $ hg pull --debug ssh://user@dummy/remote
   pulling from ssh://user@dummy/remote
-  running .* ".*/dummyssh" user@dummy ('|")hg -R remote serve --stdio('|") (re)
+  running .* ".*/dummyssh" ['"]user@dummy['"] ('|")hg -R remote serve --stdio('|") (re)
   sending hello command
   sending between command
   remote: 355