Mercurial > public > mercurial-scm > hg-stable
diff tests/test-ssh.t @ 33657:8cb9e921ef8c stable
ssh: quote parameters using shellquote (SEC)
This patch uses shellquote to quote ssh parameters more strictly to avoid
shell injection.
author | Jun Wu <quark@fb.com> |
---|---|
date | Fri, 04 Aug 2017 23:54:12 -0700 |
parents | 72f051f9a7d8 |
children | 10e162bb9bf5 |
line wrap: on
line diff
--- a/tests/test-ssh.t Mon Jul 31 14:55:11 2017 -0700 +++ b/tests/test-ssh.t Fri Aug 04 23:54:12 2017 -0700 @@ -477,7 +477,7 @@ $ hg pull --debug ssh://user@dummy/remote pulling from ssh://user@dummy/remote - running .* ".*/dummyssh" user@dummy ('|")hg -R remote serve --stdio('|") (re) + running .* ".*/dummyssh" ['"]user@dummy['"] ('|")hg -R remote serve --stdio('|") (re) sending hello command sending between command remote: 355