summaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2024-04-17Merge branch 'icasefs-symlink-confusion'Johannes Schindelin16-57/+559
2024-04-17init: refactor the template directory discovery into its own functionJohannes Schindelin3-18/+37
2024-04-17find_hook(): refactor the `STRIP_EXTENSION` logicJohannes Schindelin1-7/+11
2024-04-17clone: when symbolic links collide with directories, keep the latterJohannes Schindelin3-2/+31
2024-04-17entry: report more colliding pathsJohannes Schindelin3-1/+20
2024-04-17t5510: verify that D/F confusion cannot lead to an RCEJohannes Schindelin1-0/+24
2024-04-17submodule: require the submodule path to contain directories onlyJohannes Schindelin4-5/+113
2024-04-17clone_submodule: avoid using `access()` on directoriesJohannes Schindelin1-1/+1
2024-04-17submodules: submodule paths must not contain symlinksJohannes Schindelin2-0/+83
2024-04-17clone: prevent clashing git dirs when cloning submodule in parallelFilip Hejsek3-2/+66
2024-04-17t7423: add tests for symlinked submodule directoriesFilip Hejsek1-0/+66
2024-04-17has_dir_name(): do not get confused by characters < '/'Filip Hejsek2-53/+47
2024-04-17docs: document security issues around untrusted .git dirsJeff King2-0/+46
2024-04-17upload-pack: disable lazy-fetching by defaultJeff King4-0/+46
2024-04-17fetch/clone: detect dubious ownership of local repositoriesJohannes Schindelin4-3/+38
2024-04-17t0411: add tests for cloning from partial repoFilip Hejsek1-0/+60
2024-04-17midx: disable replace objectsXing Xin2-0/+24
2024-04-17builtin/receive-pack: convert to use git-maintenance(1)Patrick Steinhardt2-11/+10
2024-04-17run-command: introduce function to prepare auto-maintenance processPatrick Steinhardt2-6/+20
2024-04-16credential: add method for querying capabilitiesbrian m. carlson5-1/+60
2024-04-16credential-cache: implement authtype capabilitybrian m. carlson4-6/+28
2024-04-16t: add credential tests for authtypebrian m. carlson1-0/+123
2024-04-16credential: add support for multistage credential roundsbrian m. carlson6-35/+184
2024-04-16t5563: refactor for multi-stage authenticationbrian m. carlson2-47/+66
2024-04-16docs: set a limit on credential line lengthbrian m. carlson1-1/+3
2024-04-16credential: enable state capabilitybrian m. carlson2-0/+11
2024-04-16credential: add an argument to keep statebrian m. carlson4-12/+71
2024-04-16http: add support for authtype and credentialbrian m. carlson4-12/+176
2024-04-16docs: indicate new credential protocol fieldsbrian m. carlson1-1/+48
2024-04-16credential: add a field called "ephemeral"brian m. carlson3-0/+35
2024-04-16credential: gate new fields on capabilitybrian m. carlson9-24/+215
2024-04-16credential: add a field for pre-encoded credentialsbrian m. carlson2-4/+11
2024-04-16http: use new headers for each object requestbrian m. carlson2-9/+13
2024-04-16remote-curl: reset headers on new requestbrian m. carlson1-2/+4
2024-04-16credential: add an authtype fieldbrian m. carlson2-0/+11
2024-04-16mailmap: change primary address for Linus ArverLinus Arver1-0/+1
2024-04-17builtin/clone: refuse local clones of unsafe repositoriesPatrick Steinhardt2-0/+38
2024-04-17setup.c: introduce `die_upon_dubious_ownership()`Patrick Steinhardt2-0/+33
2024-04-17builtin/clone: abort when hardlinked source and target file differPatrick Steinhardt1-1/+20
2024-04-17builtin/clone: stop resolving symlinks when copying filesPatrick Steinhardt1-5/+1
2024-04-17Merge branch 'js/github-actions-update'Johannes Schindelin1-10/+10
2024-04-17Merge branch 'jc/maint-github-actions-update'Johannes Schindelin2-10/+10
2024-04-17ci(linux32): add a note about Actions that must not be updatedJohannes Schindelin1-2/+2
2024-04-17GitHub Actions: update to github-script@v7Junio C Hamano1-1/+1
2024-04-17ci: bump remaining outdated Actions versionsJohannes Schindelin1-8/+8
2024-04-17GitHub Actions: update to checkout@v4Junio C Hamano2-9/+9
2024-04-17Merge branch 'quicker-asan-lsan'Johannes Schindelin1-0/+4
2024-04-17Merge branch 'jk/test-lsan-denoise-output'Johannes Schindelin1-0/+1
2024-04-16Merge branch 'js/ci-use-macos-13'Johannes Schindelin4-21/+30
2024-04-16Merge branch 'backport/jk/libcurl-8.7-regression-workaround' into maint-2.39Johannes Schindelin4-1/+14