summary refs log tree commit diff
BranchCommit messageAuthorAge
masterAdd Gideon the NinthJune McEnroe3 weeks
 
generated by cgit-pink 1.4.1 (git 2.36.1) at 2026-09-07 19:21:56 +0000
3.0&id=cef27b670a66c9840bb6120260864e4b3a701dc2&ofs=50&showmsg=1&follow=1'>shared.c (unfollow)
Commit message (Collapse)Author
2018-08-03clone: fix directory traversalJason A. Donenfeld
This was introduced in the initial version of this code, way back when in 2008. $ curl http://127.0.0.1/cgit/repo/objects/?path=../../../../../../../../../etc/passwd root:x:0:0:root:/root:/bin/sh ... Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Reported-by: Jann Horn <jannh@google.com>
2018-08-03config: record repo.snapshot-prefix in the per-repo configKonstantin Ryabitsev