• J
    fsck: detect submodule paths starting with dash · 1a7fd1fb
    Jeff King 提交于
    As with urls, submodule paths with dashes are ignored by
    git, but may end up confusing older versions. Detecting them
    via fsck lets us prevent modern versions of git from being a
    vector to spread broken .gitmodules to older versions.
    
    Compared to blocking leading-dash urls, though, this
    detection may be less of a good idea:
    
      1. While such paths provide confusing and broken results,
         they don't seem to actually work as option injections
         against anything except "cd". In particular, the
         submodule code seems to canonicalize to an absolute
         path before running "git clone" (so it passes
         /your/clone/-sub).
    
      2. It's more likely that we may one day make such names
         actually work correctly. Even after we revert this fsck
         check, it will continue to be a hassle until hosting
         servers are all updated.
    
    On the other hand, it's not entirely clear that the behavior
    in older versions is safe. And if we do want to eventually
    allow this, we may end up doing so with a special syntax
    anyway (e.g., writing "./-sub" in the .gitmodules file, and
    teaching the submodule code to canonicalize it when
    comparing).
    
    So on balance, this is probably a good protection.
    Signed-off-by: NJeff King <peff@peff.net>
    Signed-off-by: NJunio C Hamano <gitster@pobox.com>
    1a7fd1fb
t7417-submodule-path-url.sh 720 字节