summary refs log tree commit diff
path: root/2024-04-10
diff options
context:
space:
mode:
authorJune McEnroe <june@causal.agency>2022-03-18 21:54:59 -0400
committerJune McEnroe <june@causal.agency>2022-03-18 21:58:00 -0400
commit61aa2b90def00bc449a50695e2d95c58bf5e2c84 (patch)
tree8c36add5ff44f54c60e5a7763d3844a4d99273bb /2024-04-10
parentRemove wcwidth port (diff)
downloadsrc-61aa2b90def00bc449a50695e2d95c58bf5e2c84.tar.gz
src-61aa2b90def00bc449a50695e2d95c58bf5e2c84.zip
Publish "Addendum 2021"
Diffstat (limited to '2024-04-10')
0 files changed, 0 insertions, 0 deletions
r> 2018-08-03clone: fix directory traversalJason A. Donenfeld This was introduced in the initial version of this code, way back when in 2008. $ curl http://127.0.0.1/cgit/repo/objects/?path=../../../../../../../../../etc/passwd root:x:0:0:root:/root:/bin/sh ... Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Reported-by: Jann Horn <jannh@google.com> 2018-08-03config: record repo.snapshot-prefix in the per-repo configKonstantin Ryabitsev