subversion-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Andreas Krey <a.k...@gmx.de>
Subject Re: AW: Logging Subversion client HTTP requests
Date Mon, 01 Aug 2011 08:20:44 GMT
On Mon, 01 Aug 2011 08:57:52 +0000, Markus Schaber wrote:
...
> Hmm. For http(s)://, svn:// and well set-up svn+ssh:// servers, he
> should not be able to create repository corruption, right? I would
> consider everything else to be a serious security bug in subversion.

Setting invalid svn:mergeinfo counts as repository corruption? Then it's possible.

Andreas

-- 
"Totally trivial. Famous last words."
From: Linus Torvalds <torvalds@*.org>
Date: Fri, 22 Jan 2010 07:29:21 -0800

Mime
View raw message