Re: Git clone reads safe.directory differently?

From: Junio C Hamano <gitster@pobox.com>
Date: Jul 30, 2024, 22:55 UTC
Message-ID: <xmqqr0ba8p7u.fsf@gitster.g>
In-Reply-To: <xmqqv80m8pha.fsf@gitster.g>

Junio C Hamano <gitster@pobox.com> writes:

> When you are using "--no-local" on the same machine, I do not think
> there is any guarantee that "upload-pack" side is safe.  And that is
> where the safe.directory thing needs to kick in.

Ah, I take it back. packObjectsHook won't run based on what the untrusted source repository configures, so at least we have been aware of the fact that upload-pack must be more careful than other stuff.