summary refs log tree commit diff
path: root/bin/1sh/mktokens
diff options
context:
space:
mode:
authorJune McEnroe <june@causal.agency>2019-11-22 14:51:27 -0500
committerJune McEnroe <june@causal.agency>2019-11-22 14:51:27 -0500
commitd7a978574f8afeae3c368b6a1fa8b016dbc41323 (patch)
treeff5f0a93470d1599e96565d51b8e5531183ec0c0 /bin/1sh/mktokens
parentRemove 1sh env.sh (diff)
downloadsrc-d7a978574f8afeae3c368b6a1fa8b016dbc41323.tar.gz
src-d7a978574f8afeae3c368b6a1fa8b016dbc41323.zip
Add Rogue Protocol
Diffstat (limited to 'bin/1sh/mktokens')
0 files changed, 0 insertions, 0 deletions
/td> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> 2018-08-03clone: fix directory traversalJason A. Donenfeld This was introduced in the initial version of this code, way back when in 2008. $ curl http://127.0.0.1/cgit/repo/objects/?path=../../../../../../../../../etc/passwd root:x:0:0:root:/root:/bin/sh ... Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Reported-by: Jann Horn <jannh@google.com> 2018-08-03config: record repo.snapshot-prefix in the per-repo configKonstantin Ryabitsev