Thread (175 messages) flat view 175 messages, 9 authors, 14d ago

Re: [PATCH v13 7/8] history: create squashed commits without editing

From: Junio C Hamano <hidden>
Date: 2026-08-17 15:36:22

Phillip Wood [off-list ref] writes:
I've just had a quick look at that other thread, it would be more 
convincing to me if there was some explanation of the security issues 
that accepting uppercase object ids causes. While I appreciate brian may 
not be able to talk about specific vulnerabilities in particular 
products, it would help to outline the security issues in general terms.
In any case, I do not see any new use of istarts_with() in the patch
to deliberately allow upppercase hexadecimal.  It is not like there
is an existing machinery that has generated uppercase hexadecimal
for a long time and we need to support their output, or anything
like that.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help