From: Junio C Hamano <gitster@pobox.com>
Date: Wed, 16 Nov 2011 00:03:28 GMT
Subject: Re: [PATCH 2/2] archive: limit ourselves during remote requests
Message-ID: <7v7h31szlb.fsf@alter.siamese.dyndns.org>
In-Reply-To: <20111115214840.GB20624@sigill.intra.peff.net>

Jeff King <peff@peff.net> writes:

> ... just a very stripped-down version of
> git-archive (i.e., it _only_ calls write_archive). Or it could even be
> spelled "git upload-archive --remote-request". But the point is that
> git-archive never needed to worry about security before.  We
> shouldn't be polluting it with security code; we should be bypassing it
> going to write_archive directly.

Quite sensible, and a good approach to reroll the series, I would think.