Re: [PATCH] Quote filename passed to $EDITOR

Scott Lamb <slamb@slamb.org> writes:
> I don't think that's likely because they would have to run the checkin
> from that directory. Hard not to notice a directory called "$(mail
> to-me@test.com < /etc/passwd; echo null)" if you just 'cd'd to it.

Indeed, if you've cd'd to it, you won't have this problem. It's only
if you run the command from some other (usually higher) directory,
passing the dangerous pathname as an argument.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Tue Jul 23 22:36:35 2002