Re: Expanding Includes in .gitignore
On 28/10/16 10:55, Aaron Pelly wrote:
Show 8 quoted lines
> 2) I fetch a repo with a hostile ignore file. It includes files from
> $GIT_DIR/test-data/ssl/private or some such. Change. Don't pay
> attention. Commit. Push. Problems if my test data comes from production.
>
> Is this mitigated currently?
>
> Not that git should be an enabler, but surely it falls on the user of
> untrusted software to ensure their own security?
Balls, I meant $GIT_WORK_TREE not $GIT_DIR