On Sun, Jun 22, 2014 at 01:00:53PM -0600, Cox, Michael wrote:
I like the idea of recognizing environment variable syntax in config files,
at least a feature that would allow *some* config variables to be specified
as accepting environment variable syntax. It adds a lot of flexibility,
but I'm sure it might also introduce security issues that I am completely
unaware of (like the issue you made me aware of above).
I don't think there are any security issues; if you control the
environment, you can already execute arbitrary code with git.
Now we just need somebody to volunteer to implement it. :)
-Peff