summaryrefslogtreecommitdiff
path: root/git-submodule.sh
diff options
context:
space:
mode:
authorDongHun Kwak <dh0128.kwak@samsung.com>2021-03-03 15:15:24 +0900
committerDongHun Kwak <dh0128.kwak@samsung.com>2021-03-03 15:15:24 +0900
commita4cf5ced6a19b2d28e2d430c2988452e533e8d0c (patch)
tree787ec2bc60048b2f52943d5f4880c66202c4a049 /git-submodule.sh
parent20a5516a7e1bb6c33311f5e8e3596d1ebbf33cd7 (diff)
downloadgit-a4cf5ced6a19b2d28e2d430c2988452e533e8d0c.tar.gz
git-a4cf5ced6a19b2d28e2d430c2988452e533e8d0c.tar.bz2
git-a4cf5ced6a19b2d28e2d430c2988452e533e8d0c.zip
Imported Upstream version 2.4.10upstream/2.4.10
Diffstat (limited to 'git-submodule.sh')
-rwxr-xr-xgit-submodule.sh9
1 files changed, 9 insertions, 0 deletions
diff --git a/git-submodule.sh b/git-submodule.sh
index 36797c3c..78c2740f 100755
--- a/git-submodule.sh
+++ b/git-submodule.sh
@@ -22,6 +22,15 @@ require_work_tree
wt_prefix=$(git rev-parse --show-prefix)
cd_to_toplevel
+# Restrict ourselves to a vanilla subset of protocols; the URLs
+# we get are under control of a remote repository, and we do not
+# want them kicking off arbitrary git-remote-* programs.
+#
+# If the user has already specified a set of allowed protocols,
+# we assume they know what they're doing and use that instead.
+: ${GIT_ALLOW_PROTOCOL=file:git:http:https:ssh}
+export GIT_ALLOW_PROTOCOL
+
command=
branch=
force=