[PATCH] suffix option in auth section to be used rather than prefix

Matt Mackall mpm at selenic.com
Thu Jul 14 11:49:25 CDT 2011


On Thu, 2011-07-14 at 18:22 +0200, Filip Gruszczyński wrote:
> > Actually, there's no need! As of our Project Hosting release yesterday, you can do this:
> >
> > hg clone https://code.google.com/p/hgsubversion/
> 
> Yes, I have noticed that today during testing :-) Anyway I though that
> it might be useful, if there should appear other sites that use this
> kind of addresses.

I think I'll pass unless another known problem site appears.

FYI, this one's got a security hole: if I set up another site on another
domain that has a path ending in the same suffix, I can fool you into
sending me your password.

-- 
Mathematics is the supreme nostalgia of our time.




More information about the Mercurial-devel mailing list