The risks of embedded bare repositories in Git (2022)lwn.net9 points·by tomlx·il y a 3 ans·0 comments
tomlx·il y a 3 ans·discussgit does not clone hooks, but if a subdirectory of a repo has the structure of a bare repo it can hijack git subcommands for code execution. try: git clone https://git.0x90.space/vmann/pwnd && cd pwnd/whoot && git status it is a bit crazy this is not disabled by default yet.
> Tags: satire email