Re: [PATCH] hooks-scripts: fix svn2feed.py on Windows

[Peter Samuelson]
> I suggest doing something along the lines of
>
> cmd = '"%s" info -r%s "%s"' % svnlook_cmd, revision, self.repos_path

Forgot to mention - this has a security hole if users are allowed to
create their own repositories which will then be served via svnserve or
mod_dav_svn. Not a problem on Windows, perhaps, if " is not a legal
character in a filename, but on Unix it is, so I could run arbitrary
code as the svnserve or apache user by creating a repository called

  /var/lib/svn/repos/"; do whatever I want

Much better to pass a list to popen3. I wonder why they don't bother
to support (emulate) that on Windows.

-- 
Peter Samuelson | org-tld!p12n!peter | http://p12n.org/