Skip to content
Snippets Groups Projects
Commit d7a1c4c1181d authored by Sean Farley's avatar Sean Farley
Browse files

sshpeer: check for safe ssh url (SEC)

Checking in the sshpeer for a rogue ssh:// urls seems like the right
place to do it (instead of whack-a-mole with pull, clone, push, etc).
parent 739cc0f9cbb4
No related merge requests found
......@@ -139,6 +139,8 @@
if u.scheme != 'ssh' or not u.host or u.path is None:
self._abort(error.RepoError(_("couldn't parse location %s") % path))
util.checksafessh(path)
self.user = u.user
if u.passwd is not None:
self._abort(error.RepoError(_("password in URL not supported")))
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment