t5510: verify that D/F confusion cannot lead to an RCE

Johannes Schindelin committed over 2 years ago

submodule: require the submodule path to contain directories only

Johannes Schindelin committed over 2 years ago

clone_submodule: avoid using `access()` on directories

Johannes Schindelin committed over 2 years ago

submodules: submodule paths must not contain symlinks

Johannes Schindelin committed over 2 years ago

clone: prevent clashing git dirs when cloning submodule in parallel

Filip Hejsek committed over 2 years ago

t7423: add tests for symlinked submodule directories

Filip Hejsek committed over 2 years ago

has_dir_name(): do not get confused by characters < '/'

Filip Hejsek committed over 2 years ago

docs: document security issues around untrusted .git dirs

Jeff King committed over 2 years ago

upload-pack: disable lazy-fetching by default

Jeff King committed over 2 years ago

fetch/clone: detect dubious ownership of local repositories

Johannes Schindelin committed over 2 years ago

t0411: add tests for cloning from partial repo

Filip Hejsek committed over 2 years ago

midx: disable replace objects

Xing Xin committed over 2 years ago

builtin/receive-pack: convert to use git-maintenance(1)

Patrick Steinhardt committed over 2 years ago

run-command: introduce function to prepare auto-maintenance process

Patrick Steinhardt committed over 2 years ago

credential: add method for querying capabilities

brian m. carlson committed over 2 years ago

credential-cache: implement authtype capability

brian m. carlson committed over 2 years ago

t: add credential tests for authtype

brian m. carlson committed over 2 years ago

credential: add support for multistage credential rounds

brian m. carlson committed over 2 years ago

t5563: refactor for multi-stage authentication

brian m. carlson committed over 2 years ago

docs: set a limit on credential line length

brian m. carlson committed over 2 years ago