git, branch v1.7.1.4Mirror of https://git.kernel.org/pub/scm/git/git.git/
https://www.git.shady.money/git/atom?h=v1.7.1.42010-12-15T19:40:40ZGit 1.7.1.42010-12-15T19:40:40ZJunio C Hamanogitster@pobox.com2010-12-15T19:40:40Zurn:sha1:9db41eba4259126dbe1c68e2207d342d11f14745
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.7.0.92010-12-15T19:38:19ZJunio C Hamanogitster@pobox.com2010-12-15T19:38:19Zurn:sha1:cb198b3b67feb2c0a6f22199ec14fa48d18ac1ce
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.6.6.32010-12-15T19:32:57ZJunio C Hamanogitster@pobox.com2010-12-15T19:32:57Zurn:sha1:abf411e28d9df669b0e690578a1eb95c0bd29847
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.6.5.92010-12-15T19:27:41ZJunio C Hamanogitster@pobox.com2010-12-15T19:27:41Zurn:sha1:ec82874ad47627a44b6b22a6645551a214293711
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.6.4.52010-12-15T19:19:11ZJunio C Hamanogitster@pobox.com2010-12-15T19:19:11Zurn:sha1:88fcc52e4468d5dfef4f50d2bdee4b168a855368
Signed-off-by: Junio C Hamano <gitster@pobox.com>
gitweb: Introduce esc_attr to escape attributes of HTML elements2010-12-15T19:16:31ZJakub Narebskijnareb@gmail.com2010-12-14T23:34:01Zurn:sha1:3017ed62f47ce14a959e2d315c434d4980cf4243
It is needed only to escape attributes of handcrafted HTML elements,
and not those generated using CGI.pm subroutines / methods for HTML
generation.
While at it, add esc_url and esc_html where needed, and prefer to use
CGI.pm HTML generating methods than handcrafted HTML code. Most of
those are probably unnecessary (could be exploited only by person with
write access to gitweb config, or at least access to the repository).
This fixes CVE-2010-3906
Reported-by: Emanuele Gentili <e.gentili@tigersecurity.it>
Helped-by: John 'Warthog9' Hawley <warthog9@kernel.org>
Helped-by: Jonathan Nieder <jrnieder@gmail.com>
Signed-off-by: Jakub Narebski <jnareb@gmail.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.7.1.32010-12-02T20:18:49ZJunio C Hamanogitster@pobox.com2010-12-02T20:18:49Zurn:sha1:bd01c6de67715586f7527115bb4f74e7929b3b66
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.7.0.82010-12-02T20:13:27ZJunio C Hamanogitster@pobox.com2010-12-02T20:06:06Zurn:sha1:cbcab75c54b5956dcaa4f24a4074bc99adc49629
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Merge branch 'maint-1.7.0' into maint-1.7.12010-12-02T00:37:34ZJunio C Hamanogitster@pobox.com2010-12-02T00:37:34Zurn:sha1:e760924cbeb19c6e45febdb31d9d6c95deaf2b43
* maint-1.7.0:
add: introduce add.ignoreerrors synonym for add.ignore-errors
add: introduce add.ignoreerrors synonym for add.ignore-errors2010-12-01T21:40:12ZJonathan Niederjrnieder@gmail.com2010-12-01T18:36:15Zurn:sha1:6b3020a241e2c0a1eaa6b74a10a796603bb90975
The "[add] ignore-errors" tweakable introduced by v1.5.6-rc0~30^2 (Add
a config option to ignore errors for git-add, 2008-05-12) does not
follow the usual convention for naming values in the git configuration
file.
What convention? Glad you asked.
The section name indicates the affected subsystem.
The subsection name, if any, indicates which of
an unbound set of things to set the value for.
The variable name describes the effect of tweaking
this knob.
The section and variable names can be broken into
words using bumpyCaps in documentation as a hint to
the reader. These word breaks are not significant
at the level of code, since the section and variable
names are not case sensitive.
The name "add.ignore-errors" includes a dash, meaning a naive
configuration file like
[add]
ignoreErrors
does not have any effect. Avoid such confusion by renaming to the
more consistent add.ignoreErrors, but keep the old version for
backwards compatibility.
Signed-off-by: Jonathan Nieder <jrnieder@gmail.com>
Acked-by: Jeff King <peff@peff.net>
Signed-off-by: Junio C Hamano <gitster@pobox.com>