git, branch v1.7.3.4Mirror of https://git.kernel.org/pub/scm/git/git.git/
https://git.shady.money/git/atom?h=v1.7.3.42010-12-15T19:47:40ZGit 1.7.3.42010-12-15T19:47:40ZJunio C Hamanogitster@pobox.com2010-12-15T19:47:40Zurn:sha1:fa1c8542cb3ed2a193aac2e514ebe12d7fe22a04
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.7.2.52010-12-15T19:45:36ZJunio C Hamanogitster@pobox.com2010-12-15T19:45:36Zurn:sha1:b91779f17eb19ffc2e63e84728e785cf274b47df
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.7.1.42010-12-15T19:40:40ZJunio C Hamanogitster@pobox.com2010-12-15T19:40:40Zurn:sha1:9db41eba4259126dbe1c68e2207d342d11f14745
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.7.0.92010-12-15T19:38:19ZJunio C Hamanogitster@pobox.com2010-12-15T19:38:19Zurn:sha1:cb198b3b67feb2c0a6f22199ec14fa48d18ac1ce
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.6.6.32010-12-15T19:32:57ZJunio C Hamanogitster@pobox.com2010-12-15T19:32:57Zurn:sha1:abf411e28d9df669b0e690578a1eb95c0bd29847
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.6.5.92010-12-15T19:27:41ZJunio C Hamanogitster@pobox.com2010-12-15T19:27:41Zurn:sha1:ec82874ad47627a44b6b22a6645551a214293711
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Git 1.6.4.52010-12-15T19:19:11ZJunio C Hamanogitster@pobox.com2010-12-15T19:19:11Zurn:sha1:88fcc52e4468d5dfef4f50d2bdee4b168a855368
Signed-off-by: Junio C Hamano <gitster@pobox.com>
gitweb: Introduce esc_attr to escape attributes of HTML elements2010-12-15T19:16:31ZJakub Narebskijnareb@gmail.com2010-12-14T23:34:01Zurn:sha1:3017ed62f47ce14a959e2d315c434d4980cf4243
It is needed only to escape attributes of handcrafted HTML elements,
and not those generated using CGI.pm subroutines / methods for HTML
generation.
While at it, add esc_url and esc_html where needed, and prefer to use
CGI.pm HTML generating methods than handcrafted HTML code. Most of
those are probably unnecessary (could be exploited only by person with
write access to gitweb config, or at least access to the repository).
This fixes CVE-2010-3906
Reported-by: Emanuele Gentili <e.gentili@tigersecurity.it>
Helped-by: John 'Warthog9' Hawley <warthog9@kernel.org>
Helped-by: Jonathan Nieder <jrnieder@gmail.com>
Signed-off-by: Jakub Narebski <jnareb@gmail.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Prepare for 1.7.3.42010-12-14T16:55:52ZJunio C Hamanogitster@pobox.com2010-12-14T15:51:35Zurn:sha1:ada6a4117eb204fe14a83bc51daaf923cd8127ec
Signed-off-by: Junio C Hamano <gitster@pobox.com>
use persistent memory for rejected paths2010-12-14T16:55:13ZClemens Buchacherdrizzd@aon.at2010-11-15T19:52:19Zurn:sha1:3055d78f97da105acfc0e207266e902251d2949f
An aborted merge prints the list of rejected paths as part of the
error message. Since commit f66caaf9 (do not overwrite files in
leading path), some of those paths do not have static buffers, so
we have to keep a copy. Use string_list's to accomplish this.
This changes the order of the list to the order in which the paths
are processed. Previously, it was reversed.
Signed-off-by: Clemens Buchacher <drizzd@aon.at>
Signed-off-by: Junio C Hamano <gitster@pobox.com>