[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Bug report: The auto-props setting of svn:mime-type is impossible to avoid.

From: Stefan Sperling <stsp_at_elego.de>
Date: Mon, 5 Oct 2015 11:50:32 +0200

On Mon, Oct 05, 2015 at 12:06:59AM +0200, Bert Huijben wrote:
> I'm not sure if I would call it a security problem when a user adds a file of
> their choosing to Subversion though :-)

Yes, typical SVN use cases are of no concern.

One case I could imagine where this might matter is some automated
service which records user-provided files in SVN.
Another case is where people use SVN to version home directories
which include a Downloads folder with files such as images from
the internet.

That's all a bit far fetched, though I know of one person using SVN
to keep /home under version control.
 
> This whole discussion -in its many iterations- is one of the reasons why I
> never looked at enabling this feature on Windows.

And nobody has been asking for it to be enabled?
Received on 2015-10-05 11:50:43 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.