Git security fixes released

Posted Apr 13, 2022 17:26 UTC (Wed) by jthill (subscriber, #56558)
In reply to: Git security fixes released by apoelstra
Parent article: Git security fixes released

You can't alias builtins for obviously good reason, I think it's that a planted config could define aliases that will override the user's possibly in a way that's hard to detect, so the user might use `git st` whether in their prompt generator or otherwise. Computer labs full of teenage boys . . . yeah, okay.

The check is only on auto-discovered repos, easy enough to shut it off by specifying the repo in GIT_DIR when you know the one you want.

Seems to me the safe-directory entries should support globbing, making trusted environments hard to administer is legitimately objectionable.