[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: property hooks (e.g. tsvn:startcommithook)

From: Hans-Emil Skogh <Hans-Emil.Skogh_at_tritech.se>
Date: Thu, 7 Feb 2013 14:20:35 +0000

>>> I'm wondering if anyone can tell me if we'll see an implementation
>>> of the client-side hooks based on properties such as
>>> tsvn:startcommithook in a 1.7 TSVN release?
>>> Or will we need to wait for 1.8?
>> This would most likely open up a pretty sizeable security hole. So my
>> guess is that it's not going to happen. Sorry.
> in 1.8, those properties exist:
> http://tortoisesvn.net/docs/nightly/TortoiseSVN_en/tsvn-dug-propertypage.html#tsvn-dug-propertypage-tsvn-props

Ah. I missed that. The nightly documentation still has the section about why it's *not* implemented with properties.
http://tortoisesvn.net/docs/nightly/TortoiseSVN_en/tsvn-dug-settings.html#tsvn-dug-settings-hooks
Perhaps that should be replaced with a link to the properties section?

> To prevent a security hole: every script that's set this way must be first
> approved by the user. If not approved, the script is not run.

Hmm... Still not sure how good idea this is. It will be difficult for a user to know on what grounds to approve such a script. And then it will be difficult to keep track of that the script does not change on an update. But that's another issue altogether...

Hans-Emil

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=757&dsMessageId=3047972

To unsubscribe from this discussion, e-mail: [dev-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2013-02-07 15:20:48 CET

This is an archived mail posted to the TortoiseSVN Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.