Richard Hansen 8976500cbb git-prompt.sh: don't put unsanitized branch names in $PS1 ... Both bash and zsh subject the value of PS1 to parameter expansion, command substitution, and arithmetic expansion. Rather than include the raw, unescaped branch name in PS1 when running in two- or three-argument mode, construct PS1 to reference a variable that holds the branch name. Because the shells do not recursively expand, this avoids arbitrary code execution by specially-crafted branch names such as '$(IFS=_;cmd=sudo_rm_-rf_/;$cmd)'. Signed-off-by: Richard Hansen <rhansen@bbn.com> Signed-off-by: Junio C Hamano <gitster@pobox.com>		2014-04-22 12:37:53 -07:00
..
git-completion.bash	mergetools/diffmerge: support DiffMerge as a git mergetool	2013-10-13 16:00:57 -07:00
git-completion.tcsh	Merge branch 'mk/tcsh-complete-only-known-paths'	2013-02-08 15:28:51 -08:00
git-completion.zsh	completion: zsh: improve bash script loading	2013-05-29 12:56:30 -07:00
git-prompt.sh	git-prompt.sh: don't put unsanitized branch names in $PS1	2014-04-22 12:37:53 -07:00