Files
git/Documentation
Christian Couder e693237e2b list-objects-filter: disable 'sparse:path' filters
If someone wants to use as a filter a sparse file that is in the
repository, something like "--filter=sparse:oid=<ref>:<path>"
already works.

So 'sparse:path' is only interesting if the sparse file is not in
the repository. In this case though the current implementation has
a big security issue, as it makes it possible to ask the server to
read any file, like for example /etc/password, and to explore the
filesystem, as well as individual lines of files.

If someone is interested in using a sparse file that is not in the
repository as a filter, then at the minimum a config option, such
as "uploadpack.sparsePathFilter", should be implemented first to
restrict the directory from which the files specified by
'sparse:path' can be read.

For now though, let's just disable 'sparse:path' filters.

Helped-by: Matthew DeVore <matvore@google.com>
Helped-by: Jeff Hostetler <git@jeffhostetler.com>
Signed-off-by: Christian Couder <chriscool@tuxfamily.org>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
2019-05-29 11:05:34 -07:00
..
2019-05-15 10:47:20 +09:00
2019-05-19 16:46:42 +09:00
2019-05-09 00:37:27 +09:00
2019-03-18 15:54:17 +09:00
2018-06-25 13:22:36 -07:00
2019-01-23 11:37:29 -08:00
2019-04-25 16:41:18 +09:00
2019-01-23 11:37:29 -08:00
2019-01-23 11:37:29 -08:00
2019-03-20 15:16:06 +09:00
2019-01-23 11:37:29 -08:00
2019-04-25 16:41:14 +09:00
2018-09-17 13:53:55 -07:00
2019-01-23 11:37:29 -08:00
2019-01-23 11:37:29 -08:00
2019-01-23 11:37:29 -08:00
2019-03-18 14:45:21 +09:00
2018-12-26 14:59:37 -08:00
2019-04-22 11:14:45 +09:00
2019-05-09 00:37:27 +09:00