gitea/vendor/code.gitea.io/git
Michael Kuhn 0222623be9 Explicitly disable Git credential helper (#5367)
* Explicitly disable Git credential helper

If the user running Gitea has configured a credential helper, Git
credentials might leak out of Gitea.

There are two problems with credential helpers when combined with Gitea:

1. Credentials entered by a user when doing a migration or setting up a
   mirror will end up in the credential store. In the worst case, this
   is the plain text file ~/.git-credentials.
2. Credentials in the credential store will be used for migrations and
   mirrors by all users. For example, if user A sets up a mirror, their
   credentials will be stored. If user B later sets up a mirror from the
   same host and does not enter any credentials, user A's credentials
   will be used.

This PR prepends -c credential.helper= to all Git commands to clear the
list of helpers. This requires at least Git version 2.9, as previous
versions will try to load an empty helper instead. For more details, see
24321375cd

* Update git module
2018-11-28 09:00:25 +02:00
..
blob.go Memory usage improvements (#3013) 2017-11-29 09:50:39 +08:00
command.go Explicitly disable Git credential helper (#5367) 2018-11-28 09:00:25 +02:00
commit_archive.go update code.gitea.io/git (#450) 2016-12-22 10:30:52 +01:00
commit_info.go Update code.gitea.io/git (#3251) 2017-12-22 09:00:30 +02:00
commit.go Add push webhook support for mirrored repositories (#4127) 2018-09-06 22:06:09 -04:00
doc.go Upgrade vendor "git" (#161) 2016-11-12 12:09:25 +01:00
error.go Symlink icons (#1416) (#3826) 2018-05-01 10:04:36 +03:00
git.go Memory usage improvements (#3013) 2017-11-29 09:50:39 +08:00
hook.go Take back control of hooks (#1006) 2017-02-23 11:40:44 +08:00
LICENSE Upgrade vendor "git" (#175) 2016-11-15 23:24:08 +08:00
parse.go Update code.gitea.io/git (#3482) 2018-02-10 20:19:26 +02:00
ref.go Implement git refs API for listing references (branches, tags and other) (#5354) 2018-11-27 16:52:20 -05:00
repo_blame.go Migrate to dep (#3972) 2018-05-21 15:34:20 +03:00
repo_blob.go Add raw blob endpoint to get objects by SHA ID (#5334) 2018-11-18 13:45:40 -05:00
repo_branch.go Implement git refs API for listing references (branches, tags and other) (#5354) 2018-11-27 16:52:20 -05:00
repo_commit.go Add push webhook support for mirrored repositories (#4127) 2018-09-06 22:06:09 -04:00
repo_hook.go update code.gitea.io/git (#450) 2016-12-22 10:30:52 +01:00
repo_object.go update code.gitea.io/git (#450) 2016-12-22 10:30:52 +01:00
repo_pull.go Serve .patch for pull requests (#3305) 2018-01-07 15:10:20 +02:00
repo_ref.go Implement git refs API for listing references (branches, tags and other) (#5354) 2018-11-27 16:52:20 -05:00
repo_tag.go Update code.gitea.io/git 2017-06-06 19:36:48 +02:00
repo_tree.go Explicitly disable Git credential helper (#5367) 2018-11-28 09:00:25 +02:00
repo.go Update code.gitea.io/git (#3137) 2017-12-11 10:23:34 +08:00
sha1.go Symlink icons (#1416) (#3826) 2018-05-01 10:04:36 +03:00
signature.go Update code.gitea.io/git (#3137) 2017-12-11 10:23:34 +08:00
submodule.go update code.gitea.io/git (#450) 2016-12-22 10:30:52 +01:00
tag.go Make releases faster than before and resolved #490 (#588) 2017-01-06 09:51:15 +08:00
tree_blob.go update code.gitea.io/git (#450) 2016-12-22 10:30:52 +01:00
tree_entry.go Explicitly disable Git credential helper (#5367) 2018-11-28 09:00:25 +02:00
tree.go Explicitly disable Git credential helper (#5367) 2018-11-28 09:00:25 +02:00
utils.go update code.gitea.io/git (#450) 2016-12-22 10:30:52 +01:00