diff options
| author | Johannes Schindelin <johannes.schindelin@gmx.de> | 2026-03-05 15:34:47 -0800 |
|---|---|---|
| committer | Junio C Hamano <gitster@pobox.com> | 2026-03-06 13:52:28 -0800 |
| commit | 9ed1625a581a35d7ec2d851258cf4c7fc08c1ed7 (patch) | |
| tree | 7dbe0029c9bda10ecbb1a902aaa1315d45b1f2c7 /contrib/persistent-https | |
| parent | 04949538203ba7aeb298a607280715d4f26dbe0a (diff) | |
| download | git-9ed1625a581a35d7ec2d851258cf4c7fc08c1ed7.tar.gz git-9ed1625a581a35d7ec2d851258cf4c7fc08c1ed7.zip | |
sideband: introduce an "escape hatch" to allow control characters
The preceding commit fixed the vulnerability whereas sideband messages
(that are under the control of the remote server) could contain ANSI
escape sequences that would be sent to the terminal verbatim.
However, this fix may not be desirable under all circumstances, e.g.
when remote servers deliberately add coloring to their messages to
increase their urgency.
To help with those use cases, give users a way to opt-out of the
protections: `sideband.allowControlCharacters`.
Suggested-by: brian m. carlson <sandals@crustytoothpaste.net>
Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Diffstat (limited to 'contrib/persistent-https')
0 files changed, 0 insertions, 0 deletions