You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Michael Kuhn 0222623be9 Explicitly disable Git credential helper (#5367)
* Explicitly disable Git credential helper

If the user running Gitea has configured a credential helper, Git
credentials might leak out of Gitea.

There are two problems with credential helpers when combined with Gitea:

1. Credentials entered by a user when doing a migration or setting up a
   mirror will end up in the credential store. In the worst case, this
   is the plain text file ~/.git-credentials.
2. Credentials in the credential store will be used for migrations and
   mirrors by all users. For example, if user A sets up a mirror, their
   credentials will be stored. If user B later sets up a mirror from the
   same host and does not enter any credentials, user A's credentials
   will be used.

This PR prepends -c credential.helper= to all Git commands to clear the
list of helpers. This requires at least Git version 2.9, as previous
versions will try to load an empty helper instead. For more details, see
24321375cd

* Update git module
6 years ago
..
LICENSE Upgrade vendor "git" (#175) 8 years ago
blob.go Memory usage improvements (#3013) 7 years ago
command.go Explicitly disable Git credential helper (#5367) 6 years ago
commit.go Add push webhook support for mirrored repositories (#4127) 6 years ago
commit_archive.go update code.gitea.io/git (#450) 8 years ago
commit_info.go Update code.gitea.io/git (#3251) 7 years ago
doc.go Upgrade vendor "git" (#161) 8 years ago
error.go Symlink icons (#1416) (#3826) 6 years ago
git.go Memory usage improvements (#3013) 7 years ago
hook.go Take back control of hooks (#1006) 7 years ago
parse.go Update code.gitea.io/git (#3482) 6 years ago
ref.go Implement git refs API for listing references (branches, tags and other) (#5354) 6 years ago
repo.go Update code.gitea.io/git (#3137) 7 years ago
repo_blame.go Migrate to dep (#3972) 6 years ago
repo_blob.go Add raw blob endpoint to get objects by SHA ID (#5334) 6 years ago
repo_branch.go Implement git refs API for listing references (branches, tags and other) (#5354) 6 years ago
repo_commit.go Add push webhook support for mirrored repositories (#4127) 6 years ago
repo_hook.go update code.gitea.io/git (#450) 8 years ago
repo_object.go update code.gitea.io/git (#450) 8 years ago
repo_pull.go Serve .patch for pull requests (#3305) 7 years ago
repo_ref.go Implement git refs API for listing references (branches, tags and other) (#5354) 6 years ago
repo_tag.go Update code.gitea.io/git 7 years ago
repo_tree.go Explicitly disable Git credential helper (#5367) 6 years ago
sha1.go Symlink icons (#1416) (#3826) 6 years ago
signature.go Update code.gitea.io/git (#3137) 7 years ago
submodule.go update code.gitea.io/git (#450) 8 years ago
tag.go Make releases faster than before and resolved #490 (#588) 8 years ago
tree.go Explicitly disable Git credential helper (#5367) 6 years ago
tree_blob.go update code.gitea.io/git (#450) 8 years ago
tree_entry.go Explicitly disable Git credential helper (#5367) 6 years ago
utils.go update code.gitea.io/git (#450) 8 years ago