News for hackers. Stuff that matters.
Re:Sourcegraph is no longer Open Source by fortunateregard on Tuesday July 04, 2023 @01:50PM (#36590179)
The button on the browser just navigates to the URL `git-peek://https://github.com/name/repo`. How your system handles this git-peek protocol is completely up to you. While the git-peek package does offer to setup a handler for this custom git-peek protocol, I went ahead and set it up manually. Now, my system calls this bash script whenever it encounters the git-peek protocol:

  #!/usr/bin/env bash
  # Expects a single argument: git-peek://<path>
  # Example: git-peek://https://github.com/Jarred-Sumner/peek
  kitty --single-instance --detach -e zsh -c "source ~/.zshrc; git peek $1"
You can set it up to do anything you like.
Re:Sourcegraph is no longer Open Source by progval on Tuesday July 04, 2023 @04:29PM (#36592135)
What happens if you click a link to git-peek://$(cat</etc/passwd) ?
Re:Sourcegraph is no longer Open Source by fortunateregard on Tuesday July 04, 2023 @04:48PM (#36592344)
I'm not sure. What?

Is there a reasonably legitimate reason to stop using this?

Re:Sourcegraph is no longer Open Source by ilyt on Tuesday July 04, 2023 @07:22PM (#36593753)
That's the issue here. You need to be 100% sure handler is entirely bug free or any site can redirect to that url and exploit any bug in it