Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

gitphp-tuleap

Clone or download

Read-only

request #10397: OS command injection through a filename when the file's history is displayed in the web Git browser

Download Browse
+33 −59
Thomas Gerbet (tgerbet) 2017-07-03 17:01
Thomas Gerbet (tgerbet) 2017-07-05 12:22
4e21ce9cd5481306c4b574f3ca8c200f53631513
4a998e3ddd4ebc1a35e8ebd9f10facbd48e7ba60
git #deps/tuleap/gitphp-tuleap/4e21ce9cd5481306c4b574f3ca8c200f53631513

Modified Files

Side by side diff
Inline diff
Name
M gitphp-tuleap.spec +4 −1 Go to diff View file
M src/include/git/Archive.class.php +2 −2 Go to diff View file
M src/include/git/Blob.class.php +5 −5 Go to diff View file
M src/include/git/Commit.class.php +5 −5 Go to diff View file
M src/include/git/FileDiff.class.php +2 −2 Go to diff View file
M src/include/git/Project.class.php +8 −8 Go to diff View file
M src/include/git/Ref.class.php +1 −1 Go to diff View file
M src/include/git/Tag.class.php +3 −32 Go to diff View file
M src/include/git/Tree.class.php +1 −1 Go to diff View file
M src/include/git/TreeDiff.class.php +2 −2 Go to diff View file