Permalink
Switch branches/tags
Nothing to show
Commits on Feb 10, 2016
  1. Merge pull request #41 from dtan4/make-ci-pass

    Make it pass CI
    committed Feb 10, 2016
  2. Make it pass CI

    dtan4 committed Feb 10, 2016
Commits on Aug 13, 2015
  1. Merge pull request #40 from Paperback/master

    Update gitreceive
    committed Aug 13, 2015
  2. Update gitreceive

    changed perl for sed; now working on CoreOS
    fixed issue #24
    Paperback committed Aug 13, 2015
Commits on Nov 19, 2014
  1. Merge pull request #35 from jpadilla/master

    Exit when someone ssh connect to the server without git push
    committed Nov 19, 2014
  2. Update gitreceive

    jpadilla committed Nov 19, 2014
Commits on Aug 27, 2014
  1. Merge pull request #28 from tombh/comments

    Add commments
    committed Aug 27, 2014
Commits on Aug 6, 2014
  1. Added commments

    tombh committed Aug 5, 2014
Commits on Jul 2, 2014
  1. Merge pull request #27 from jwerle/master

    make bpkg friendly
    committed Jul 2, 2014
  2. Update package.json

    jwerle committed Jul 2, 2014
  3. make bpkg friendly

    jwerle committed Jul 2, 2014
Commits on Jun 2, 2014
  1. updating tests

    committed Jun 2, 2014
Commits on May 30, 2014
  1. simplifying test container

    committed May 30, 2014
  2. minor fix might do it

    committed May 30, 2014
  3. 0.2.0 overhaul

    committed May 30, 2014
Commits on Apr 16, 2014
  1. Merge pull request #23 from Se7enSky/master

    fixed upload-key command when GITUSER is set
    committed Apr 16, 2014
Commits on Apr 9, 2014
  1. fixed init command when GITUSER is set

    Ivan Kravchenko committed Apr 9, 2014
Commits on Nov 11, 2013
  1. Merge pull request #20 from Esya/master

    Adds a link to 'Handling submodules'
    committed Nov 11, 2013
Commits on Oct 25, 2013
  1. Merge pull request #18 from philippbosch/master

    Fix issue with single quotes surrounding repo name
    committed Oct 25, 2013
Commits on Oct 24, 2013
  1. Merge pull request #16 from gipi/security-fix

    Fix arbitrary execution of code by untrusted user input.
    committed Oct 24, 2013
Commits on Oct 22, 2013
  1. Fix arbitrary execution of code by untrusted user input.

    SSH_ORIGINAL_COMMAND was used in an eval() without check: in a normal
    git push this is not a problem but under the hood this command is only
    an ssh command so malicious user could do something like the following
    
      $ ssh vagrant -C 'bar "foo;rm -vfr /tmp/"'
      /usr/local/bin/gitreceive: eval: line 45: unexpected EOF while looking for matching `"'
      /usr/local/bin/gitreceive: eval: line 46: syntax error: unexpected end of file
      /usr/local/bin/gitreceive: line 54: /home/git//hooks/pre-receive: No such file or directory
      chmod: cannot access `/home/git//hooks/pre-receive': No such file or directory
      fatal: unrecognized command 'bar foo'
      rm: cannot remove `/tmp': Permission denied
    gipi committed Oct 22, 2013
Commits on Oct 15, 2013
  1. Merge pull request #15 from markstos/master

    Add some explicit documentation on how gitreceive works
    committed Oct 15, 2013
  2. Add some explicit documentation on how gitreceive works

        For people intending to maintain this in production, it's important
        to understand the details of how this works in case something goes
        wrong.
    
        To that end, I've added some explicit comments in the source code,
        and explained the key role that SSH "forced command" feature plays
        in the README.md file.
    markstos committed Oct 15, 2013
Commits on Aug 16, 2013
  1. Merge pull request #14 from josegonzalez/patch-1

    Added a note about environment variables. Closes #8.
    committed Aug 16, 2013
Commits on Aug 3, 2013
Commits on Jul 17, 2013
  1. Merge pull request #13 from surjikal/patch-1

    Now showing username argument in gitreceive upload-key command example.
    committed Jul 17, 2013
  2. Now showing username argument in gitreceive upload-key command example.

    It took me awhile to notice that `progrium` was actually the username argument.
    surjikal committed Jul 17, 2013