git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Gitview Shell Injection Vulnerability

From
Jeff King <peff@peff.net>
Date
Dec 28, 2016, 06:42 UTC
Message-ID
<20161228064255.f4akjdsq24r2hqn7@sigill.intra.peff.net>
In-Reply-To
<CAGZ79kbOjpi4SBLPVaKXJ+L8VN+0N=ZqgDcHeYydkKsS20yR1Q@mail.gmail.com>
On Tue, Dec 27, 2016 at 10:45:58AM -0800, Stefan Beller wrote:
Show 8 quoted lines
> > I expect that things that start their life in the contrib/ area
> > to graduate out of contrib/ once they mature, either by becoming
> > projects on their own, or moving to the toplevel directory.  On
> > the other hand, I expect I'll be proposing removal of disused
> > and inactive ones from time to time.
> 
> Maybe it's time for a spring cleanup and remove some old (dead?)
> projects from contrib?
Yeah, that was my thought on reading the vulnerability report: "that's
still around?". Looks like it hasn't had a substantive commit since
2007. But I dunno, maybe it's just finished, and doesn't need any more
changes. :)
-Peff
Previous: Stefan BellerNext: Stefan Beller
Message 3 of 8 in “Gitview Shell Injection Vulnerability”
  1. JavanteaDec 27, 2016
  2. Stefan BellerDec 27, 2016
  3. Jeff KingDec 28, 2016
  4. contrib: remove gitviewStefan Beller, Dec 28, 2016
  5. JavanteaDec 28, 2016
  6. Jeff KingDec 29, 2016
  7. Junio C HamanoJan 1, 2017
  8. Aneesh Kumar K.VJan 2, 2017

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.