git.99rst.org / git.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 45917f0)
push --signed: tighten what the receiving end can ask to sign
authorJunio C Hamano <redacted>
Thu, 2 Apr 2015 01:00:36 +0000 (18:00 -0700)
committerJunio C Hamano <redacted>
Thu, 2 Apr 2015 18:05:18 +0000 (11:05 -0700)
commitafcb6ee30acf17f4e0338c49fbab301131abfbba
tree8459187f6b4bddbbf09d681b96085e76853f7787tree | snapshot
parent45917f0f994aee78dccf2a41000b48fc23db1a0bcommit | diff
push --signed: tighten what the receiving end can ask to sign

Instead of blindly trusting the receiving side to give us a sensible
nonce to sign, limit the length (max 256 bytes) and the alphabet
(alnum and a few selected punctuations, enough to encode in base64)
that can be used in nonce.

Signed-off-by: Junio C Hamano <redacted>
send-pack.c diff | blob | history
git clone https://git.99rst.org/PROJECT