Skip to content
Snippets Groups Projects
Commit bd725a71 authored by Augie Fackler's avatar Augie Fackler
Browse files

config: add some more documentation around why svn and git subrepos are off

parent 846942fd
No related branches found
No related tags found
No related merge requests found
......@@ -1905,6 +1905,13 @@
When disallowed, any commands including :hg:`update` will fail if
subrepositories are involved.
Security note: auditing in Mercurial is known to be insufficient
to prevent clone-time code execution with carefully constructed
Git subrepos. It is unknown if a similar defect is present in
Subversion subrepos, so both are disabled by default out of an
abundance of caution. Re-enable such subrepos via this setting
with caution.
(default: `hg`)
``templatealias``
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment