Re: svn commit: r1366209 - in /subversion/trunk/subversion: libsvn_wc/externals.c tests/libsvn_client/client-test.c

On 07/26/2012 03:04 PM, rhuijben_at_apache.org wrote:
> Author: rhuijben
> Date: Thu Jul 26 22:04:03 2012
> New Revision: 1366209
>
> URL: http://svn.apache.org/viewvc?rev=1366209&view=rev
> Log:
> * subversion/libsvn_wc/externals.c
> (svn_wc__resolve_relative_external_url):
> Deny /../ syntax in urls in externals. Stepping over the
> root of a server is not possible.

The first sentence sounds like no /../ are allowed in any external URLs
which isn't the case, it appears with your change they are not allowed
anywhere for any scheme or server root relative path, just just past the
first two characters.

Blair
Received on 2012-07-27 01:49:11 CEST