{"thread":{"id":"22546","subject":"using gitconfig to get shell access","startedAt":"2010-02-06T17:33:04Z","lastAt":"2010-02-06T17:33:04Z","messageCount":1,"participants":["Sitaram Chamarty"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"133811","messageId":"slrnhmr9uh.qqv.sitaramc@sitaramc.homelinux.net","threadId":"22546","inReplyTo":null,"subject":"using gitconfig to get shell access","fromName":"Sitaram Chamarty","fromEmail":"sitaramc@gmail.com","sentAt":"2010-02-06T17:33:04Z","receivedAt":"2010-02-06T17:33:04Z","isPatch":false,"sender":{"key":"sitaramc@gmail.com","avatar":"https://avatars.githubusercontent.com/u/43316?v=4"},"body":"Hello all,\n\nIf I have a bare repo that is accessed only remotely, but I\nallow arbitrary 'git config' keys to be set on it by the\nremote user (somehow), can any of them be used to make git\nrun arbitrary commands on the server?\n\nFor example, 'hooks.showrev', is a \"shell command used to\nformat each revision in the email\".\n\nOf course that's only in contrib, but are there any like\nthat in the main git config settings?  I took a look through\nman git-config and offhand I couldn't find any, but if\nsomeone knows more definitively I'd appreciate hearing about\nit.\n\nThanks,\n\nSitaram\n"}]}