[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: [ANNOUNCE] svnrdump: A new dumper/ loader in trunk

From: Daniel Shahaf <d.s_at_daniel.shahaf.name>
Date: Thu, 19 Aug 2010 23:46:40 +0300

Les Mikesell wrote on Thu, Aug 19, 2010 at 15:25:51 -0500:
> On 8/19/2010 3:13 PM, Daniel Shahaf wrote:
>> Let me say that even more clearly: svnrdump is a new CLIENT-SIDE tool.
>> It did not change a millimeter in the server code or in the network
>> protocols. That severly limits the extent of security issues it can
>> introduce.
> I guess it would be the equivalent of svnsync with remote repositories
> which just omits the ability to write the intermediate dump format. But,
> that brings up the question: are all clients are allowed by the remote
> protocol to lie about the author and date?

Lie? No. But all clients can set the author and date property after
the commit. (assuming a pre-revprop-change exists and allows that; that
is a precondition for 'svn ps --revprop', 'svnsync', and anything else,
to change revprops).
Received on 2010-08-19 22:49:37 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.