hg-admin-tools: manage access for multiple developers via ssh

Paul Crowley paul at lshift.net
Tue Jul 8 04:36:24 CDT 2008


Rolando Espinoza La Fuente wrote:
> The dots?
> 
> Try:
> 
> allowedchars = "A-Za-z0-9_-\."

I haven't done that because that will allow paths that include ".." as a 
component, which is a security hole.  I'll happily accept a patch that 
allows dots if it disallows that sort of thing.
-- 
   [][][] Paul Crowley
     [][] LShift Ltd
   []  [] www.lshift.net


More information about the Mercurial mailing list