arialdomartini / oh-my-git

An opinionated git prompt for bash and zsh
MIT License
3.66k stars 288 forks source link

Local code execution bug =) #104

Open jldugger opened 7 years ago

jldugger commented 7 years ago

https://github.com/njhartwell/pw3nage contains a proof of concept that can be used to execute a script inside the repo by using a cleverly named branch.

Steps to reproduce:

  1. enable oh-my-git
  2. clone above git repo
  3. cd into repo
cy4n commented 7 years ago

this could be used as a workaround https://github.com/arialdomartini/oh-my-git/pull/109#issuecomment-311462105 (until someone provides a fix)