upstream/mercurial-mirror Files · tests/test-mq-subrepo-svn.t

dispatch: protect against malicious 'hg serve --stdio' invocations (sec)...

dispatch: protect against malicious 'hg serve --stdio' invocations (sec) Some shared-ssh installations assume that 'hg serve --stdio' is a safe command to run for minimally trusted users. Unfortunately, the messy implementation of argument parsing here meant that trying to access a repo named '--debugger' would give the user a pdb prompt, thereby sidestepping any hoped-for sandboxing. Serving repositories over HTTP(S) is unaffected. We're not currently hardening any subcommands other than 'serve'. If your service exposes other commands to users with arbitrary repository names, it is imperative that you defend against repository names of '--debugger' and anything starting with '--config'. The read-only mode of hg-ssh stopped working because it provided its hook configuration to "hg serve --stdio" via --config parameter. This is banned for security reasons now. This patch switches it to directly call ui.setconfig(). If your custom hosting infrastructure relies on passing --config to "hg serve --stdio", you'll need to find a different way to get that configuration into Mercurial, either by using ui.setconfig() as hg-ssh does in this patch, or by placing an hgrc file someplace where Mercurial will read it. mitrandir@fb.com provided some extra fixes for the dispatch code and for hg-ssh in places that I overlooked.

Yuya Nishihara - - Load All Authors

File last commit:

r26374:048e41e9 default


                r32050:77eaf953

4.1.3 stable

Download file

             test-mq-subrepo-svn.t
        
                    53 lines
            
             | 1.2 KiB
            
                | text/troff
            
             |
                Tads3Lexer
            
             / tests / test-mq-subrepo-svn.t
          
                    History
                
                 |
                  Source
                 | Raw
                 |Copy content
                 |Copy permalink

        Matt Mackall
    
tests: replace exit 80 with #require

              r22046
            
      #require svn13

        Kevin Bullock
    
subrepo: separate out mq+svn subrepo tests...

              r13300
            
        Yuya Nishihara
    
tests: write hgrc of more than two lines by using shell heredoc...

              r23172
            
        $ cat <<EOF >> $HGRCPATH

        > [extensions]

        > mq =

        > [diff]

        > nodates = 1

        > EOF

        Kevin Bullock
    
subrepo: separate out mq+svn subrepo tests...

              r13300
            
        Kevin Bullock
    
test-subrepo-mq-svn.t: correct comment...

              r13326
            
      fn to create new repository, and cd into it

        Kevin Bullock
    
subrepo: separate out mq+svn subrepo tests...

              r13300
            
        $ mkrepo() {

        >     hg init $1

        >     cd $1

        >     hg qinit

        > }

      handle svn subrepos safely

        $ svnadmin create svn-repo-2499

        Mads Kiilerich
    
tests: cleanup of svn url handling...

              r17033
            
        $ SVNREPOPATH=`pwd`/svn-repo-2499/project

      #if windows

        Augie Fackler
    
tests: use $PYTHON instead of hardcoding python...

              r22947
            
        $ SVNREPOURL=file:///`$PYTHON -c "import urllib, sys; sys.stdout.write(urllib.quote(sys.argv[1]))" "$SVNREPOPATH"`

        Mads Kiilerich
    
tests: cleanup of svn url handling...

              r17033
            
      #else

        Augie Fackler
    
tests: use $PYTHON instead of hardcoding python...

              r22947
            
        $ SVNREPOURL=file://`$PYTHON -c "import urllib, sys; sys.stdout.write(urllib.quote(sys.argv[1]))" "$SVNREPOPATH"`

        Mads Kiilerich
    
tests: cleanup of svn url handling...

              r17033
            
      #endif

        Kevin Bullock
    
subrepo: separate out mq+svn subrepo tests...

              r13300
            
        $ mkdir -p svn-project-2499/trunk

        Yuya Nishihara
    
tests: suppress verbose output of svn transaction...

              r26374
            
        $ svn import -qm 'init project' svn-project-2499 "$SVNREPOURL"

        Kevin Bullock
    
subrepo: separate out mq+svn subrepo tests...

              r13300
            
      qnew on repo w/svn subrepo

        $ mkrepo repo-2499-svn-subrepo

        Mads Kiilerich
    
tests: cleanup of svn url handling...

              r17033
            
        $ svn co "$SVNREPOURL"/trunk sub

        Kevin Bullock
    
subrepo: separate out mq+svn subrepo tests...

              r13300
            
        Checked out revision 1.

        $ echo 'sub = [svn]sub' >> .hgsub

        $ hg add .hgsub

        Matt Mackall
    
tests: fixes for svn 1.4.2

              r13410
            
        $ hg status -S -X '**/format'

        Kevin Bullock
    
subrepo: separate out mq+svn subrepo tests...

              r13300
            
        A .hgsub

        $ hg qnew -m0 0.diff

        $ cd sub

        $ echo a > a

        $ svn add a

        A         a

        $ svn st

        Matt Mackall
    
tests: fixes for svn 1.4.2

              r13410
            
        A*    a (glob)

        Kevin Bullock
    
subrepo: separate out mq+svn subrepo tests...

              r13300
            
        $ cd ..

        $ hg status -S        # doesn't show status for svn subrepos (yet)

        $ hg qnew -m1 1.diff

        FUJIWARA Katsunori
    
subrepo: add bailifchanged to centralize raising Abort if subrepo is dirty...

              r24471
            
        abort: uncommitted changes in subrepository 'sub'

        Kevin Bullock
    
subrepo: separate out mq+svn subrepo tests...

              r13300
            
        [255]

        Mads Kiilerich
    
tests: add missing trailing 'cd ..'...

              r16913
            
        $ cd ..

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

Matt Mackall tests: replace exit 80 with #require	r22046	#require svn13
Kevin Bullock subrepo: separate out mq+svn subrepo tests...	r13300
Yuya Nishihara tests: write hgrc of more than two lines by using shell heredoc...	r23172	$ cat <<EOF >> $HGRCPATH
		> [extensions]
		> mq =
		> [diff]
		> nodates = 1
		> EOF
Kevin Bullock subrepo: separate out mq+svn subrepo tests...	r13300
Kevin Bullock test-subrepo-mq-svn.t: correct comment...	r13326	fn to create new repository, and cd into it
Kevin Bullock subrepo: separate out mq+svn subrepo tests...	r13300	$ mkrepo() {
		> hg init $1
		> cd $1
		> hg qinit
		> }


		handle svn subrepos safely

		$ svnadmin create svn-repo-2499
Mads Kiilerich tests: cleanup of svn url handling...	r17033
		$ SVNREPOPATH=`pwd`/svn-repo-2499/project
		#if windows
Augie Fackler tests: use $PYTHON instead of hardcoding python...	r22947	$ SVNREPOURL=file:///`$PYTHON -c "import urllib, sys; sys.stdout.write(urllib.quote(sys.argv[1]))" "$SVNREPOPATH"`
Mads Kiilerich tests: cleanup of svn url handling...	r17033	#else
Augie Fackler tests: use $PYTHON instead of hardcoding python...	r22947	$ SVNREPOURL=file://`$PYTHON -c "import urllib, sys; sys.stdout.write(urllib.quote(sys.argv[1]))" "$SVNREPOPATH"`
Mads Kiilerich tests: cleanup of svn url handling...	r17033	#endif

Kevin Bullock subrepo: separate out mq+svn subrepo tests...	r13300	$ mkdir -p svn-project-2499/trunk
Yuya Nishihara tests: suppress verbose output of svn transaction...	r26374	$ svn import -qm 'init project' svn-project-2499 "$SVNREPOURL"
Kevin Bullock subrepo: separate out mq+svn subrepo tests...	r13300
		qnew on repo w/svn subrepo
		$ mkrepo repo-2499-svn-subrepo
Mads Kiilerich tests: cleanup of svn url handling...	r17033	$ svn co "$SVNREPOURL"/trunk sub
Kevin Bullock subrepo: separate out mq+svn subrepo tests...	r13300	Checked out revision 1.
		$ echo 'sub = [svn]sub' >> .hgsub
		$ hg add .hgsub
Matt Mackall tests: fixes for svn 1.4.2	r13410	$ hg status -S -X '**/format'
Kevin Bullock subrepo: separate out mq+svn subrepo tests...	r13300	A .hgsub
		$ hg qnew -m0 0.diff
		$ cd sub
		$ echo a > a
		$ svn add a
		A a
		$ svn st
Matt Mackall tests: fixes for svn 1.4.2	r13410	A* a (glob)
Kevin Bullock subrepo: separate out mq+svn subrepo tests...	r13300	$ cd ..
		$ hg status -S # doesn't show status for svn subrepos (yet)
		$ hg qnew -m1 1.diff
FUJIWARA Katsunori subrepo: add bailifchanged to centralize raising Abort if subrepo is dirty...	r24471	abort: uncommitted changes in subrepository 'sub'
Kevin Bullock subrepo: separate out mq+svn subrepo tests...	r13300	[255]
Mads Kiilerich tests: add missing trailing 'cd ..'...	r16913
		$ cd ..