<feed xmlns='http://www.w3.org/2005/Atom'>
<title>git/git-submodule.sh, branch v2.6.2</title>
<subtitle>Mirror of https://git.kernel.org/pub/scm/git/git.git/
</subtitle>
<id>https://git.shady.money/git/atom?h=v2.6.2</id>
<link rel='self' href='https://git.shady.money/git/atom?h=v2.6.2'/>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/'/>
<updated>2015-09-28T22:33:56Z</updated>
<entry>
<title>Sync with 2.4.10</title>
<updated>2015-09-28T22:33:56Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2015-09-28T22:33:56Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=11a458befcd7662fbe6d2d53c76d49ae2b0fe219'/>
<id>urn:sha1:11a458befcd7662fbe6d2d53c76d49ae2b0fe219</id>
<content type='text'>
</content>
</entry>
<entry>
<title>submodule: allow only certain protocols for submodule fetches</title>
<updated>2015-09-23T18:35:48Z</updated>
<author>
<name>Jeff King</name>
<email>peff@peff.net</email>
</author>
<published>2015-09-16T17:13:12Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=33cfccbbf35a56e190b79bdec5c85457c952a021'/>
<id>urn:sha1:33cfccbbf35a56e190b79bdec5c85457c952a021</id>
<content type='text'>
Some protocols (like git-remote-ext) can execute arbitrary
code found in the URL. The URLs that submodules use may come
from arbitrary sources (e.g., .gitmodules files in a remote
repository). Let's restrict submodules to fetching from a
known-good subset of protocols.

Note that we apply this restriction to all submodule
commands, whether the URL comes from .gitmodules or not.
This is more restrictive than we need to be; for example, in
the tests we run:

  git submodule add ext::...

which should be trusted, as the URL comes directly from the
command line provided by the user. But doing it this way is
simpler, and makes it much less likely that we would miss a
case. And since such protocols should be an exception
(especially because nobody who clones from them will be able
to update the submodules!), it's not likely to inconvenience
anyone in practice.

Reported-by: Blake Burkhart &lt;bburky@bburky.com&gt;
Signed-off-by: Jeff King &lt;peff@peff.net&gt;
Signed-off-by: Junio C Hamano &lt;gitster@pobox.com&gt;
</content>
</entry>
<entry>
<title>Merge branch 'ah/submodule-typofix-in-error' into maint</title>
<updated>2015-09-17T19:11:08Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2015-09-17T19:11:06Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=cfc3e0ee4a01873b50c080560c519762491cd60a'/>
<id>urn:sha1:cfc3e0ee4a01873b50c080560c519762491cd60a</id>
<content type='text'>
Error string fix.

* ah/submodule-typofix-in-error:
  git-submodule: remove extraneous space from error message
</content>
</entry>
<entry>
<title>git-submodule: remove extraneous space from error message</title>
<updated>2015-08-28T18:57:24Z</updated>
<author>
<name>Alex Henrie</name>
<email>alexhenrie24@gmail.com</email>
</author>
<published>2015-08-27T04:26:19Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=b80fa842ed5029853f7f1fb6bdc9171257b1db55'/>
<id>urn:sha1:b80fa842ed5029853f7f1fb6bdc9171257b1db55</id>
<content type='text'>
Signed-off-by: Alex Henrie &lt;alexhenrie24@gmail.com&gt;
Acked-by: Chris Packham &lt;judge.packham@gmail.com&gt;
Signed-off-by: Junio C Hamano &lt;gitster@pobox.com&gt;
</content>
</entry>
<entry>
<title>Merge branch 'ps/submodule-sanitize-path-upon-add' into maint</title>
<updated>2015-03-05T21:13:10Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2015-03-05T21:13:09Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=3630be2749819b79de917a77c6627e3f84c00a11'/>
<id>urn:sha1:3630be2749819b79de917a77c6627e3f84c00a11</id>
<content type='text'>
"git submodule add" failed to squash "path/to/././submodule" to
"path/to/submodule".

* ps/submodule-sanitize-path-upon-add:
  git-submodule.sh: fix '/././' path normalization
</content>
</entry>
<entry>
<title>Merge branch 'ps/submodule-sanitize-path-upon-add'</title>
<updated>2015-02-22T20:28:26Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2015-02-22T20:28:26Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=070f6fed052ca0cf6625f6566d23c71530d7abf9'/>
<id>urn:sha1:070f6fed052ca0cf6625f6566d23c71530d7abf9</id>
<content type='text'>
"git submodule add" failed to squash "path/to/././submodule" to
"path/to/submodule".

* ps/submodule-sanitize-path-upon-add:
  git-submodule.sh: fix '/././' path normalization
</content>
</entry>
<entry>
<title>git-submodule.sh: fix '/././' path normalization</title>
<updated>2015-02-02T20:35:16Z</updated>
<author>
<name>Patrick Steinhardt</name>
<email>ps@pks.im</email>
</author>
<published>2015-01-30T15:14:03Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=8196e728955a084303e99affff2ebc1120112516'/>
<id>urn:sha1:8196e728955a084303e99affff2ebc1120112516</id>
<content type='text'>
When we add a new submodule the path of the submodule is being
normalized. We fail to normalize multiple adjacent '/./', though.
Thus 'path/to/././submodule' will become 'path/to/./submodule' where
it should be 'path/to/submodule' instead.

Signed-off-by: Patrick Steinhardt &lt;ps@pks.im&gt;
Acked-by: Jens Lehmann &lt;Jens.Lehmann@web.de&gt;
Signed-off-by: Junio C Hamano &lt;gitster@pobox.com&gt;
</content>
</entry>
<entry>
<title>git-submodule.sh: avoid "echo" path-like values</title>
<updated>2014-06-19T20:30:03Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2014-06-10T15:33:39Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=6a0662304d85ffa288c960f688eb9704954ea8ee'/>
<id>urn:sha1:6a0662304d85ffa288c960f688eb9704954ea8ee</id>
<content type='text'>
SysV-derived implementation of "echo" interprets some backslash
sequences as special instruction, e.g. "echo 'ab\c'" shows an
incomplete line with 'a' and 'b' on it.  Avoid using it when showing
a path-like values in the script.

Signed-off-by: Junio C Hamano &lt;gitster@pobox.com&gt;
</content>
</entry>
<entry>
<title>git-submodule.sh: avoid "test &lt;cond&gt; -a/-o &lt;cond&gt;"</title>
<updated>2014-06-19T20:30:03Z</updated>
<author>
<name>Elia Pinto</name>
<email>gitter.spiros@gmail.com</email>
</author>
<published>2014-06-10T12:28:33Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=496eeeb19b9c4adf743bf9acdc25d814e9c58a4e'/>
<id>urn:sha1:496eeeb19b9c4adf743bf9acdc25d814e9c58a4e</id>
<content type='text'>
The construct is error-prone; "test" being built-in in most modern
shells, the reason to avoid "test &lt;cond&gt; &amp;&amp; test &lt;cond&gt;" spawning
one extra process by using a single "test &lt;cond&gt; -a &lt;cond&gt;" no
longer exists.

Signed-off-by: Elia Pinto &lt;gitter.spiros@gmail.com&gt;
Signed-off-by: Junio C Hamano &lt;gitster@pobox.com&gt;
</content>
</entry>
<entry>
<title>Merge branch 'sk/submodules-absolute-path-on-windows'</title>
<updated>2014-06-06T18:26:38Z</updated>
<author>
<name>Junio C Hamano</name>
<email>gitster@pobox.com</email>
</author>
<published>2014-06-06T18:26:38Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/git/commit/?id=ee8213951a36cefabed7dd653965cffb6aee628e'/>
<id>urn:sha1:ee8213951a36cefabed7dd653965cffb6aee628e</id>
<content type='text'>
* sk/submodules-absolute-path-on-windows:
  Revert "submodules: fix ambiguous absolute paths under Windows"
</content>
</entry>
</feed>
