Re: safe.directory wildcards
- From
Junio C Hamano <gitster@pobox.com>
- Date
- May 31, 2024, 14:49 UTC
- Message-ID
- <xmqqy17qhw9d.fsf@gitster.g>
- In-Reply-To
- <ZlmH1CFZWHokAqso@tanuki>
Patrick Steinhardt <ps@pks.im> writes:
Show 5 quoted lines
>> I am reluctant to use wildmatch() but I would expect that in >> practice "leading path matches" (in other words, "everything under >> this directory is OK") is sufficient, perhaps? > > Is there any particular reason why you don't want to use wildmatch?
Mostly out of the principle to avoid anything more complex than absolutely necessary in a security relevant code path.
It is called "superstition" in other languages ;-).