summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2024-04-19Git 2.42.2v2.42.2Johannes Schindelin
2024-04-19Sync with 2.41.1Johannes Schindelin
2024-04-19Git 2.41.1v2.41.1Johannes Schindelin
2024-04-19Sync with 2.40.2Johannes Schindelin
2024-04-19Git 2.40.2v2.40.2Johannes Schindelin
2024-04-19Sync with 2.39.4Johannes Schindelin
2024-04-19Git 2.39.4v2.39.4Johannes Schindelin
2024-04-19Merge branch 'ownership-checks-in-local-clones'Johannes Schindelin
2024-04-19Merge branch 'defense-in-depth'Johannes Schindelin
2024-04-19fsck: warn about symlink pointing inside a gitdirJohannes Schindelin
2024-04-19core.hooksPath: add some protection while cloningJohannes Schindelin
2024-04-19init.templateDir: consider this config setting protectedJohannes Schindelin
2024-04-19clone: prevent hooks from running during a cloneJohannes Schindelin
2024-04-19Add a helper function to compare file contentsJohannes Schindelin
2024-04-17Merge branch 'icasefs-symlink-confusion'Johannes Schindelin
2024-04-17init: refactor the template directory discovery into its own functionJohannes Schindelin
2024-04-17find_hook(): refactor the `STRIP_EXTENSION` logicJohannes Schindelin
2024-04-17clone: when symbolic links collide with directories, keep the latterJohannes Schindelin
2024-04-17entry: report more colliding pathsJohannes Schindelin
2024-04-17t5510: verify that D/F confusion cannot lead to an RCEJohannes Schindelin
2024-04-17submodule: require the submodule path to contain directories onlyJohannes Schindelin
2024-04-17clone_submodule: avoid using `access()` on directoriesJohannes Schindelin
2024-04-17submodules: submodule paths must not contain symlinksJohannes Schindelin
2024-04-17clone: prevent clashing git dirs when cloning submodule in parallelFilip Hejsek
2024-04-17t7423: add tests for symlinked submodule directoriesFilip Hejsek
2024-04-17has_dir_name(): do not get confused by characters < '/'Filip Hejsek
2024-04-17docs: document security issues around untrusted .git dirsJeff King
2024-04-17upload-pack: disable lazy-fetching by defaultJeff King
2024-04-17fetch/clone: detect dubious ownership of local repositoriesJohannes Schindelin
2024-04-17t0411: add tests for cloning from partial repoFilip Hejsek
2024-04-17builtin/clone: refuse local clones of unsafe repositoriesPatrick Steinhardt
2024-04-17setup.c: introduce `die_upon_dubious_ownership()`Patrick Steinhardt
2024-04-17builtin/clone: abort when hardlinked source and target file differPatrick Steinhardt
2024-04-17builtin/clone: stop resolving symlinks when copying filesPatrick Steinhardt
2024-04-17Merge branch 'js/github-actions-update'Johannes Schindelin
2024-04-17Merge branch 'jc/maint-github-actions-update'Johannes Schindelin
2024-04-17ci(linux32): add a note about Actions that must not be updatedJohannes Schindelin
2024-04-17GitHub Actions: update to github-script@v7Junio C Hamano
2024-04-17ci: bump remaining outdated Actions versionsJohannes Schindelin
2024-04-17GitHub Actions: update to checkout@v4Junio C Hamano
2024-04-17Merge branch 'quicker-asan-lsan'Johannes Schindelin
2024-04-17Merge branch 'jk/test-lsan-denoise-output'Johannes Schindelin
2024-04-16Merge branch 'js/ci-use-macos-13'Johannes Schindelin
2024-04-16Merge branch 'backport/jk/libcurl-8.7-regression-workaround' into maint-2.39Johannes Schindelin
2024-04-16Merge branch 'jk/redact-h2h3-headers-fix' into maint-2.42Johannes Schindelin
2024-04-16Merge branch 'jk/httpd-test-updates'Johannes Schindelin
2024-04-16Merge branch 'jk/http-test-fixes'Johannes Schindelin
2024-04-16ci(linux-asan/linux-ubsan): let's save some timeJohannes Schindelin
2024-04-16test-lib: ignore uninteresting LSan outputJeff King
2024-04-16ci: upgrade to using macos-13Johannes Schindelin