Re: manual option --inline --no-attach override required for format.attachg
- From
brian m. carlson <sandals@crustytoothpaste.net>
- Date
- Feb 16, 2023, 01:29 UTC
- Message-ID
- <Y+2HCa5kqfVZ0Coq@tapette.crustytoothpaste.net>
- In-Reply-To
- <20230215215112.62559-1-Brian.Inglis@Shaw.ca>
On 2023-02-15 at 21:51:13, Brian Inglis wrote:
> Anything else you want to add: > initially found format.attach set in /etc/gitconfig and no way to override > would be great if linux-man maintainer could set repo config format.inline format.attach=no
I think Junio has responded to the rest of this and is more familiar with it than I am, but we don't allow repository configuration to be shipped in the repo. That's because in general configuration can contain programs or shell commands and thus execute arbitrary code, so doing so would be a security problem.
Experiences with Vim modelines have shown that embedding configuration, even when highly restricted, can be the cause of lots of security vulnerabilities, and we've seen this with config used by submodules in the past. For that and many other reasons, including the fact that users may not care what upstream's preferred settings are, it's extremely unlikely that we'll add any automatic way to ship configuration in the repository.
-- brian m. carlson (he/him or they/them) Toronto, Ontario, CA