Use git-shell in 'gitreceive run'

progrium / gitreceive

Easily accept and handle arbitrary git pushes

1.14k stars 108 forks source link

Closed ema closed 11 years ago

ema commented 11 years ago

gitreceive currently allows users to execute arbitrary commands on the system eg: ssh git@whatever /bin/bash

This patch uses git-shell to evaluate the command sent by remote users, restricting command execution to git-related programs.

progrium commented 11 years ago

Sorry for the delay. I wanted to add tests first. :)