summary refs log tree commit diff homepage
path: root/2016
diff options
context:
space:
mode:
authorJune McEnroe <programble@gmail.com>2016-12-12 00:35:32 -0500
committerJune McEnroe <programble@gmail.com>2016-12-12 00:35:32 -0500
commit4fd65af5b186dcd8525e9734f5c2f68228ea3d1a (patch)
tree134ebe19c6d9a77d52a6fa735e75f7b11ac25283 /2016
parentDay 12 (diff)
downloadaoc-4fd65af5b186dcd8525e9734f5c2f68228ea3d1a.tar.gz
aoc-4fd65af5b186dcd8525e9734f5c2f68228ea3d1a.zip
Day 12 part 2
Diffstat (limited to '2016')
0 files changed, 0 insertions, 0 deletions
class='logsubject'>clone: fix directory traversalJason A. Donenfeld This was introduced in the initial version of this code, way back when in 2008. $ curl http://127.0.0.1/cgit/repo/objects/?path=../../../../../../../../../etc/passwd root:x:0:0:root:/root:/bin/sh ... Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Reported-by: Jann Horn <jannh@google.com> 2018-08-03config: record repo.snapshot-prefix in the per-repo configKonstantin Ryabitsev