summary refs log tree commit diff
path: root/doc/pdf/Makefile
diff options
context:
space:
mode:
Diffstat (limited to 'doc/pdf/Makefile')
0 files changed, 0 insertions, 0 deletions
 

generated by cgit-pink 1.4.1 (git 2.36.1) at 2025-05-25 10:34:20 +0000


 


ui-clone.c?h=1.4.0&id=53efaf30b50f095cad8c160488c74bba3e3b2680&follow=1'>clone: fix directory traversalJason A. Donenfeld

This was introduced in the initial version of this code, way back when
in 2008.

$ curl http://127.0.0.1/cgit/repo/objects/?path=../../../../../../../../../etc/passwd
root:x:0:0:root:/root:/bin/sh
...

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Reported-by: Jann Horn <jannh@google.com>



2018-08-03config: record repo.snapshot-prefix in the per-repo configKonstantin Ryabitsev