From: Tom G. Christensen <tgc@jupiterrise.com>
Date: Sat, 12 Aug 2017 09:04:20 GMT
Subject: Re: [PATCH 1/2] http: Fix handling of missing CURLPROTO_*
Message-ID: <91420770-f02e-7685-9c0e-f840633f01d5@jupiterrise.com>
In-Reply-To: <xmqqo9rly6dx.fsf@gitster.mtv.corp.google.com>

On 12/08/17 02:30, Junio C Hamano wrote:
> This may make the code to _compile_, but is it sensible to let the
> code build and be used by the end users without the "these protocols
> are safe" filter, I wonder?
> 

Git will display a warning at runtime if this is not available but 
perhaps this warning could be worded more strongly and/or make reference 
to CVE-2009-0037.

-tgc