Skip to content

git-config should have shell injections #15258

@Rudxain

Description

@Rudxain

The git-config grammar queries should inject bash (sic. should be sh) into fields such as those in the alias and credential(helper) tables; doubly so if the entry's value starts with ! as that is an arbitrary shell command, not just a builtin git cmd

I might open a PR for this; Seems easy, but it'd take me some time

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions