upstream/mercurial-mirror Files · tests/test-schemes.t

dispatch: protect against malicious 'hg serve --stdio' invocations (sec)...

dispatch: protect against malicious 'hg serve --stdio' invocations (sec) Some shared-ssh installations assume that 'hg serve --stdio' is a safe command to run for minimally trusted users. Unfortunately, the messy implementation of argument parsing here meant that trying to access a repo named '--debugger' would give the user a pdb prompt, thereby sidestepping any hoped-for sandboxing. Serving repositories over HTTP(S) is unaffected. We're not currently hardening any subcommands other than 'serve'. If your service exposes other commands to users with arbitrary repository names, it is imperative that you defend against repository names of '--debugger' and anything starting with '--config'. The read-only mode of hg-ssh stopped working because it provided its hook configuration to "hg serve --stdio" via --config parameter. This is banned for security reasons now. This patch switches it to directly call ui.setconfig(). If your custom hosting infrastructure relies on passing --config to "hg serve --stdio", you'll need to find a different way to get that configuration into Mercurial, either by using ui.setconfig() as hg-ssh does in this patch, or by placing an hgrc file someplace where Mercurial will read it. mitrandir@fb.com provided some extra fixes for the dispatch code and for hg-ssh in places that I overlooked.

Jason R. Coombs - - Load All Authors

File last commit:

r27982:bf1d5c22 default


                r32050:77eaf953

4.1.3 stable

Download file

             test-schemes.t
        
                    74 lines
            
             | 1.4 KiB
            
                | text/troff
            
             |
                Tads3Lexer
            
             / tests / test-schemes.t
          
                    History
                
                 |
                  Source
                 | Raw
                 |Copy content
                 |Copy permalink

        Matt Mackall
    
tests: replace exit 80 with #require

              r22046
            
      #require serve

        Matt Mackall
    
tests: unify test-schemes

              r12486
            
        $ cat <<EOF >> $HGRCPATH

        > [extensions]

        > schemes=

        > 

        > [schemes]

        > l = http://localhost:$HGPORT/

        > parts = http://{1}:$HGPORT/

        > z = file:\$PWD/

        > EOF

        $ hg init test

        $ cd test

        $ echo a > a

        $ hg ci -Am initial

        adding a

        Mads Kiilerich
    
scheme: don't crash on invalid URLs

              r18910
            
      invalid scheme

        $ hg log -R z:z

        abort: no '://' in scheme url 'z:z'

        [255]

      http scheme

        Matt Mackall
    
tests: unify test-schemes

              r12486
            
        $ hg serve -n test -p $HGPORT -d --pid-file=hg.pid -A access.log -E errors.log

        $ cat hg.pid >> $DAEMON_PIDS

        $ hg incoming l://

        comparing with l://

        searching for changes

        no changes found

        [1]

      check that {1} syntax works

        $ hg incoming --debug parts://localhost

        Mads Kiilerich
    
tests: reintroduce ":$HGPORT" in test output...

              r12643
            
        using http://localhost:$HGPORT/

        Peter Arrenbrecht
    
httprepo: use caps instead of between for compat check...

              r13603
            
        sending capabilities command

        Brodie Rao
    
url: add trailing slashes to URLs with hostnames that don't have one...

              r13815
            
        comparing with parts://localhost/

        Peter Arrenbrecht
    
discovery: add new set-based discovery...

              r14164
            
        query 1; heads

        Peter Arrenbrecht
    
setdiscovery: batch heads and known(ownheads)...

              r14624
            
        sending batch command

        Matt Mackall
    
tests: unify test-schemes

              r12486
            
        searching for changes

        Peter Arrenbrecht
    
discovery: add new set-based discovery...

              r14164
            
        all remote heads known locally

        Matt Mackall
    
tests: unify test-schemes

              r12486
            
        no changes found

        [1]

      check that paths are expanded

        $ PWD=`pwd` hg incoming z://

        comparing with z://

        searching for changes

        no changes found

        [1]

        Jason R. Coombs
    
schemes: add debugexpandscheme command, resolving a scheme to canonical form

              r27982
            
      check that debugexpandscheme outputs the canonical form

        $ hg debugexpandscheme bb://user/repo

        https://bitbucket.org/user/repo

      expanding an unknown scheme emits the input

        $ hg debugexpandscheme foobar://this/that

        foobar://this/that

      expanding a canonical URL emits the input

        $ hg debugexpandscheme https://bitbucket.org/user/repo

        https://bitbucket.org/user/repo

        Matt Mackall
    
tests: unify test-schemes

              r12486
            
      errors

        $ cat errors.log

        Mads Kiilerich
    
tests: add missing trailing 'cd ..'...

              r16913
            
        $ cd ..

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

Matt Mackall tests: replace exit 80 with #require	r22046	#require serve
Matt Mackall tests: unify test-schemes	r12486
		$ cat <<EOF >> $HGRCPATH
		> [extensions]
		> schemes=
		>
		> [schemes]
		> l = http://localhost:$HGPORT/
		> parts = http://{1}:$HGPORT/
		> z = file:\$PWD/
		> EOF
		$ hg init test
		$ cd test
		$ echo a > a
		$ hg ci -Am initial
		adding a
Mads Kiilerich scheme: don't crash on invalid URLs	r18910
		invalid scheme

		$ hg log -R z:z
		abort: no '://' in scheme url 'z:z'
		[255]

		http scheme

Matt Mackall tests: unify test-schemes	r12486	$ hg serve -n test -p $HGPORT -d --pid-file=hg.pid -A access.log -E errors.log
		$ cat hg.pid >> $DAEMON_PIDS
		$ hg incoming l://
		comparing with l://
		searching for changes
		no changes found
		[1]

		check that {1} syntax works

		$ hg incoming --debug parts://localhost
Mads Kiilerich tests: reintroduce ":$HGPORT" in test output...	r12643	using http://localhost:$HGPORT/
Peter Arrenbrecht httprepo: use caps instead of between for compat check...	r13603	sending capabilities command
Brodie Rao url: add trailing slashes to URLs with hostnames that don't have one...	r13815	comparing with parts://localhost/
Peter Arrenbrecht discovery: add new set-based discovery...	r14164	query 1; heads
Peter Arrenbrecht setdiscovery: batch heads and known(ownheads)...	r14624	sending batch command
Matt Mackall tests: unify test-schemes	r12486	searching for changes
Peter Arrenbrecht discovery: add new set-based discovery...	r14164	all remote heads known locally
Matt Mackall tests: unify test-schemes	r12486	no changes found
		[1]

		check that paths are expanded

		$ PWD=`pwd` hg incoming z://
		comparing with z://
		searching for changes
		no changes found
		[1]

Jason R. Coombs schemes: add debugexpandscheme command, resolving a scheme to canonical form	r27982	check that debugexpandscheme outputs the canonical form

		$ hg debugexpandscheme bb://user/repo
		https://bitbucket.org/user/repo

		expanding an unknown scheme emits the input

		$ hg debugexpandscheme foobar://this/that
		foobar://this/that

		expanding a canonical URL emits the input

		$ hg debugexpandscheme https://bitbucket.org/user/repo
		https://bitbucket.org/user/repo

Matt Mackall tests: unify test-schemes	r12486	errors

		$ cat errors.log
Mads Kiilerich tests: add missing trailing 'cd ..'...	r16913
		$ cd ..