git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: How should git-config include.path option work in ~/.gitconfig file?

From
Jeff King <peff@peff.net>
Date
Jun 23, 2014, 17:29 UTC
Message-ID
<20140623172913.GE4838@sigill.intra.peff.net>
In-Reply-To
<CAK6hiNjxeQ6sy1Uk_ApTgKT41cPE-NB1D+ec2JqFvog_9HeFZw@mail.gmail.com>
On Sun, Jun 22, 2014 at 01:00:53PM -0600, Cox, Michael wrote:
Show 5 quoted lines
> I like the idea of recognizing environment variable syntax in config files,
> at least a feature that would allow *some* config variables to be specified
> as accepting environment variable syntax.  It adds a lot of flexibility,
> but I'm sure it might also introduce security issues that I am completely
> unaware of (like the  issue you made me aware of above).

I don't think there are any security issues; if you control the environment, you can already execute arbitrary code with git.

Now we just need somebody to volunteer to implement it. :)
-Peff
Previous: Junio C Hamano
Message 3 of 3 in “Re: How should git-config include.path option work in ~/.gitconfig file?”
  1. Jeff KingJun 21, 2014
  2. Junio C HamanoJun 23, 2014
  3. Jeff KingJun 23, 2014

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.