git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH v2] list-objects-filter: disable 'sparse:path' filters

From
Christian Couder <christian.couder@gmail.com>
Date
May 29, 2019, 07:29 UTC
Message-ID
<CAP8UFD08pOmUGkTT3BtDqLwB0g3Q_C0_+RctGb_WfFq7K-7wsA@mail.gmail.com>
In-Reply-To
<xmqqo93m1i49.fsf@gitster-ct.c.googlers.com>
On Tue, May 28, 2019 at 9:42 PM Junio C Hamano <gitster@pobox.com> wrote:
Show 5 quoted lines
>
> What is curious is that this does not touch Documentation/ hierarchy
> at all---is that a sign that nobody makes any serious use of the
> --filter=... thing and we can freely drop "features" around it when
> we see it necessary (like in this case)?
I just forgot about the Documentation.
> Or do we need something like this on top (or squashed in)?  I can
> live with or without "Note that..." myself.
Yeah, I will squash something like what you suggest soon.
Show 24 quoted lines
>  Documentation/rev-list-options.txt | 6 +++---
>  1 file changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/Documentation/rev-list-options.txt b/Documentation/rev-list-options.txt
> index ddbc1de43f..73aafea8d6 100644
> --- a/Documentation/rev-list-options.txt
> +++ b/Documentation/rev-list-options.txt
> @@ -725,9 +725,6 @@ specification contained in the blob (or blob-expression) '<blob-ish>'
>  to omit blobs that would not be not required for a sparse checkout on
>  the requested refs.
>  +
> -The form '--filter=sparse:path=<path>' similarly uses a sparse-checkout
> -specification contained in <path>.
> -+
>  The form '--filter=tree:<depth>' omits all blobs and trees whose depth
>  from the root tree is >= <depth> (minimum depth if an object is located
>  at multiple depths in the commits traversed). <depth>=0 will not include
> @@ -737,6 +734,9 @@ tree and blobs which are referenced directly by a commit reachable from
>  <commit> or an explicitly-given object. <depth>=2 is like <depth>=1
>  while also including trees and blobs one more level removed from an
>  explicitly-given commit or tree.
> ++
> +Note that the form '--filter=sparse:path=<path>' that wants to read from
> +an arbitrary path on the filesystem is not supported, for security reasons.
I'd rather say:

"Note that the form '--filter=sparse:path=<path>' that wants to read from an arbitrary path on the filesystem has been dropped for security reasons."

to be more consistent with the error message (that Matthew suggested in a comment following my initial RFC patch).

Thanks, Christian.

Previous: Junio C Hamano
Message 4 of 4 in “list-objects-filter: disable 'sparse:path' filters”
  1. list-objects-filter: disable 'sparse:path' filtersChristian Couder, May 25, 2019
  2. Jeff KingMay 28, 2019
  3. Junio C HamanoMay 28, 2019
  4. Christian CouderMay 29, 2019

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.