Re: "svn diff" bug that leads to security/privacy problems

On 4/12/05, Vincent Lefevre <vincent+svn@vinc17.org> wrote:
> Here's a testcase, if someone is able to test:
>
> svnadmin create svntest
> svn co file:///`pwd`/svntest wc
> cd wc
> echo test > file
> svn add file
> svn ps svn:mime-type application/octet-stream file
> svn ci -m 'Adding file.'
> ln -s file link
> svn add link
> svn diff

If you set the mime-type on "link" then there is no problem. Keep in
mind that "file" doesn't have to be in the repository -- the link can
point to a file outside of the repo that will never be in the repo. So
you can't always have a mime-type set on the link destination whereas
you can always set the mime-type on the link itself.

So I'm still not seeing how this is a bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Wed Apr 13 06:49:29 2005