Post 2.3 cycle (batch #6)

Signed-off-by: Junio C Hamano <gitster@pobox.com>

Junio C Hamano committed Mar 3, 2015 at 14:39 UTC 97c12a8b71e7d42b87b9588ba2fe0e1e44411c21
1 file changed +24
RelNotes
+24
@@ -40,6 +40,9 @@ UI, Workflows & Features
40 questioning. Now it asks for confirmation when the answer looks
41 too short to be a valid encoding name.
42
43 + * When "git apply --whitespace=fix" fixed whitespace errors in the
44 + common context lines, the command reports that it did so.
45 +
46
47 Performance, Internal Implementation, Development Support etc.
48
@@ -222,3 +225,24 @@ notes for details).
225 * "update-index --refresh" used to leak when an entry cannot be
226 refreshed for whatever reason.
227 (merge bc1c2ca sb/plug-leak-in-make-cache-entry later to maint).
228 +
229 + * The "interpolated-path" option of "git daemon" inserted any string
230 + client declared on the "host=" capability request without checking.
231 + Sanitize and limit %H and %CH to a saner and a valid DNS name.
232 + (merge b485373 jk/daemon-interpolate later to maint).
233 +
234 + * "git daemon" looked up the hostname even when "%CH" and "%IP"
235 + interpolations are not requested, which was unnecessary.
236 + (merge dc8edc8 rs/daemon-interpolate later to maint).
237 +
238 + * Even though we officially haven't dropped Perl 5.8 support, the
239 + Getopt::Long package that came with it does not support "--no-"
240 + prefix to negate a boolean option; manually add support to help
241 + people with older Getopt::Long package.
242 + (merge f471494 km/send-email-getopt-long-workarounds later to maint).
243 +
244 + * "git apply" was not very careful about reading from, removing,
245 + updating and creating paths outside the working tree (under
246 + --index/--cached) or the current directory (when used as a
247 + replacement for GNU patch).
248 + (merge e0d201b jc/apply-beyond-symlink later to maint).