Derrick Stolee [off-list ref] writes:
quoted
I do not see the need to say "even" here. In what other situation
do we make connectivity checks, and is there a need to be more
strict than others when checking fetched packfiles?
I suppose that I was implying that fetches are the more common
operation, and the scrutiny applied to an arbitrary pack-file from
a remote is probably higher there. However, who knows where a
bundle came from, so the scrutiny should be the same.
Ah, I see that is where that "even" came from. And yes, I agree
that unbundling and fetch should be suspicious of their input to the
same degree.