changeset 7717:8d0362047e29

middleware: don't allow trailing text after Git commands This is used for determining repos and commands and what access users should have. We thus want to be very strict when parsing these commands.
author Mads Kiilerich <mads@kiilerich.com>
date Tue, 08 Jan 2019 13:02:34 +0100
parents a4a4bcc09ac5
children 4b41a96416f5
files kallithea/lib/middleware/simplegit.py
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/kallithea/lib/middleware/simplegit.py	Mon Jan 07 02:08:35 2019 +0100
+++ b/kallithea/lib/middleware/simplegit.py	Tue Jan 08 13:02:34 2019 +0100
@@ -46,7 +46,7 @@
 log = logging.getLogger(__name__)
 
 
-GIT_PROTO_PAT = re.compile(r'^/(.+)/(info/refs|git-upload-pack|git-receive-pack)')
+GIT_PROTO_PAT = re.compile(r'^/(.+)/(info/refs|git-upload-pack|git-receive-pack)$')
 
 
 def is_git(environ):