Git: Malicious repositories can execute remote code while cloning

Re:Git: Malicious repositories can execute remote code while... by earthboundkid on Wednesday March 10, 2021 @10:39AM (#26412341)

A bug that affects my teams once every few years is a developer will create a file named "A.txt" check it into Git, realize it should be "a.txt" and rename it, and then basically everything will shit the bed and you waste a day figuring out why nothing is working.

A related bug is a developer will make a webpage called /a/ but link to /A/ and then the link will be broken in production. At this point, I have seen this same bug enough times to be able to fix it reasonably quickly, but it definitely wastes time for the team.

[ Parent | on HN ]

Re:Git: Malicious repositories can execute remote code while... by emodendroket on Wednesday March 10, 2021 @11:03AM (#26412632)

Yeah, my current company encourages development in a case-sensitive volume and I assume this is why. But this is more an issue of your development environment working differently than prod than a problem with the notion of case insensitivity per se.

[ Parent | on HN ]

Re:Git: Malicious repositories can execute remote code while... by jesboat on Wednesday March 10, 2021 @12:04PM (#26413460)

We added a commit hook to block case conflicts.

[ Parent | on HN ]