From: Jeff King <peff@peff.net>
Date: Mon, 23 Jun 2014 17:29:13 GMT
Subject: Re: How should git-config include.path option work in ~/.gitconfig file?
Message-ID: <20140623172913.GE4838@sigill.intra.peff.net>
In-Reply-To: <CAK6hiNjxeQ6sy1Uk_ApTgKT41cPE-NB1D+ec2JqFvog_9HeFZw@mail.gmail.com>

On Sun, Jun 22, 2014 at 01:00:53PM -0600, Cox, Michael wrote:

> I like the idea of recognizing environment variable syntax in config files,
> at least a feature that would allow *some* config variables to be specified
> as accepting environment variable syntax.  It adds a lot of flexibility,
> but I'm sure it might also introduce security issues that I am completely
> unaware of (like the  issue you made me aware of above).

I don't think there are any security issues; if you control the
environment, you can already execute arbitrary code with git.

Now we just need somebody to volunteer to implement it. :)

-Peff