diff options
Diffstat (limited to 'usr/local/bin/git-wrapper')
| -rw-r--r-- | usr/local/bin/git-wrapper | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/usr/local/bin/git-wrapper b/usr/local/bin/git-wrapper index bf0781b..3039d10 100644 --- a/usr/local/bin/git-wrapper +++ b/usr/local/bin/git-wrapper @@ -11,6 +11,7 @@ fi cmd=$(echo "$SSH_ORIGINAL_COMMAND" | cut -d' ' -f1) path=$(echo "$SSH_ORIGINAL_COMMAND" | cut -d"'" -f2) +# Block path traversal attempts if [[ "$path" == *..* ]]; then echo "Invalid path" >&2 exit 1 |