summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2025-05-28Git 2.45.4v2.45.4Taylor Blau3-2/+9
2025-05-28Sync with 2.44.4Taylor Blau29-449/+708
2025-05-28Git 2.44.4v2.44.4Taylor Blau3-2/+9
2025-05-28Sync with 2.43.7Taylor Blau28-449/+701
2025-05-28Git 2.43.7v2.43.7Taylor Blau3-2/+75
2025-05-28Merge branch 'tb/wincred-buffer-overflow' into maint-2.43Taylor Blau1-7/+15
2025-05-28wincred: avoid buffer overflow in wcsncat()Taylor Blau1-7/+15
2025-05-28Merge branch 'jt/config-quote-cr' into maint-2.43Taylor Blau3-1/+45
2025-05-28Merge branch 'ps/bundle-uri-arbitrary-writes' into maint-2.43Taylor Blau2-0/+45
2025-05-28Merge branch 'js/gitk-git-gui-harden-exec-open' into maint-2.43Taylor Blau21-441/+523
2025-05-23bundle-uri: fix arbitrary file writes via parameter injectionPatrick Steinhardt' via Git Security2-0/+45
2025-05-23config: quote values containing CR characterJustin Tobler3-1/+45
2025-05-23Merge branch 'js/fix-open-exec'Johannes Sixt20-233/+217
2025-05-23Merge branch 'ml/replace-auto-execok'Johannes Sixt4-109/+141
2025-05-23git-gui: sanitize 'exec' arguments: convert new 'cygpath' callsJohannes Sixt1-2/+2
2025-05-23Merge branch 'js/fix-open-exec'Johannes Sixt1-93/+172
2025-05-23Merge branch 'ah/fix-open-with-stdin'Johannes Sixt1-16/+3
2025-05-23Merge branch 'ml/replace-auto-execok' into js/fix-open-execTaylor Blau4-109/+141
2025-05-23git-gui: do not mistake command arguments as redirection operatorsJohannes Sixt1-0/+3
2025-05-23git-gui: introduce function git_redir for git calls with redirectionsJohannes Sixt3-5/+9
2025-05-23git-gui: pass redirections as separate argument to git_readJohannes Sixt5-10/+9
2025-05-23git-gui: pass redirections as separate argument to _open_stdout_stderrJohannes Sixt5-12/+11
2025-05-23git-gui: convert git_read*, git_write to be non-variadicJohannes Sixt16-62/+62
2025-05-23git-gui: override exec and open only on WindowsMark Levedahl1-54/+64
2025-05-23gitk: sanitize 'open' arguments: revisit recently updated 'open' callsJohannes Sixt1-8/+9
2025-05-23git-gui: use git_read in githook_readJohannes Sixt1-2/+1
2025-05-23git-gui: sanitize $PATH on all platformsMark Levedahl1-29/+33
2025-05-23git-gui: break out a separate function git_read_niceJohannes Sixt3-34/+11
2025-05-23git-gui: assure PATH has only absolute elements.Mark Levedahl1-4/+16
2025-05-23git-gui: remove option --stderr from git_readJohannes Sixt5-9/+7
2025-05-23git-gui: cleanup git-bash menu itemMark Levedahl1-7/+6
2025-05-23git-gui: sanitize 'exec' arguments: backgroundJohannes Sixt1-9/+19
2025-05-23git-gui: avoid auto_execok in do_windows_shortcutMark Levedahl1-1/+1
2025-05-23git-gui: sanitize 'exec' arguments: simple casesJohannes Sixt4-15/+46
2025-05-23git-gui: avoid auto_execok for git-bash menu itemMark Levedahl1-1/+1
2025-05-23git-gui: treat file names beginning with "|" as relative pathsJohannes Sixt11-32/+44
2025-05-23git-gui: remove unused proc is_shellscriptMark Levedahl1-10/+0
2025-05-23git-gui: remove git config --list handling for git < 1.5.3Johannes Sixt1-45/+22
2025-05-23git-gui: remove special treatment of Windows from open_cmd_pipeJohannes Sixt1-14/+5
2025-05-23git-gui: remove HEAD detachment implementation for git < 1.5.3Mark Levedahl1-12/+2
2025-05-23git-gui: use only the configured shellMark Levedahl2-3/+4
2025-05-23git-gui: remove Tcl 8.4 workaround on 2>@1 redirectionMark Levedahl1-18/+3
2025-05-23git-gui: make _shellpath usable on startupMark Levedahl1-8/+30
2025-05-23Merge branch 'ml/git-gui-exec-path-fix'Johannes Sixt1-26/+3
2025-05-23git-gui: use [is_Windows], not bad _shellpathMark Levedahl1-1/+1
2025-05-23git-gui: _which, only add .exe suffix if not presentMark Levedahl1-0/+3
2025-05-23Merge branch 'js/fix-open-exec-2.40.0' into js/fix-open-execTaylor Blau1-85/+163
2025-05-23gitk: encode arguments correctly with "open"Avi Halachmi (:avih)1-16/+3
2025-05-23gitk: sanitize 'open' arguments: command pipelineJohannes Sixt1-4/+15
2025-05-23gitk: collect construction of blameargs into a single conditionalJohannes Sixt1-8/+6