subrepo: disable git and svn subrepos by default (BC) (SEC)
We have a security issue with git subrepos. I'm not sure if svn subrepo is vulnerable, but it seems not 100% safe to allow writing arbitrary data into a metadata directory. So for now, only hg subrepo is enabled by default. Maybe we should improve the help to describe why git/svn subrepos are disabled.
Showing
- mercurial/help/config.txt 1 addition, 1 deletionmercurial/help/config.txt
- mercurial/subrepo.py 1 addition, 1 deletionmercurial/subrepo.py
- tests/test-convert-git.t 4 additions, 0 deletionstests/test-convert-git.t
- tests/test-mq-subrepo-svn.t 2 additions, 0 deletionstests/test-mq-subrepo-svn.t
- tests/test-subrepo-git.t 16 additions, 0 deletionstests/test-subrepo-git.t
- tests/test-subrepo-svn.t 15 additions, 0 deletionstests/test-subrepo-svn.t
Loading
Please register or sign in to comment