Re: persistent-https, url insteadof, and `git submodule`
- From
- Dennis Kaarsemaker <dennis.kaarsemaker@booking.com>
- Date
- May 19, 2017, 21:55 UTC
- Message-ID
- <1495230934.19473.10.camel@booking.com>
- In-Reply-To
- <1495230186.19473.7.camel@kaarsemaker.net>
On Fri, 2017-05-19 at 23:43 +0200, Dennis Kaarsemaker wrote:
Show 25 quoted lines
> On Fri, 2017-05-19 at 14:57 -0500, Elliott Cable wrote: > > Set up `persistent-https` as described in the [README][]; including the > > ‘rewrite https urls’ feature in `.gitconfig`: > > > > [url "persistent-https"] > > insteadof = https > > [url "persistent-http"] > > insteadof = http > > > > Unfortunately, this breaks `git submodule add`: > > > > > git submodule add https://github.com/nodenv/nodenv.git \ > > ./Vendor/nodenv > > Cloning into '/Users/ec/Library/System Repo/Vendor/nodenv'... > > fatal: transport 'persistent-https' not allowed > > fatal: clone of 'https://github.com/nodenv/nodenv.git' into > > submodule path '/Users/ec/Library/System Repo/Vendor/nodenv' failed > > > > Presumably this isn't intended behaviour? > > It actually is. git-submodule sets GIT_PROTOCOL_FROM_USER to 0, which > makes git not trust any urls except http(s), git, ssh and file urls > unless you explicitely configure git to allow it. See the > GIT_ALLOW_PROTOCOL section in man git and the git-config section it > links to.
33cfccbbf3 (submodule: allow only certain protocols for submodule fetches, 2015-09-16) says:
submodule: allow only certain protocols for submodule fetches Some protocols (like git-remote-ext) can execute arbitrary code found in the URL. The URLs that submodules use may come from arbitrary sources (e.g., .gitmodules files in a remote repository). Let's restrict submodules to fetching from a known-good subset of protocols. Note that we apply this restriction to all submodule commands, whether the URL comes from .gitmodules or not. This is more restrictive than we need to be; for example, in the tests we run: git submodule add ext::... which should be trusted, as the URL comes directly from the command line provided by the user. But doing it this way is simpler, and makes it much less likely that we would miss a case. And since such protocols should be an exception (especially because nobody who clones from them will be able to update the submodules!), it's not likely to inconvenience anyone in practice.
D.