aboutsummaryrefslogtreecommitdiff
path: root/cgit
diff options
context:
space:
mode:
Diffstat (limited to 'cgit')
-rwxr-xr-xcgit/ssh/git-shell-commands/fork1
-rwxr-xr-xcgit/ssh/git-shell-commands/new1
-rwxr-xr-xcgit/ssh/git-shell-commands/set-description1
3 files changed, 3 insertions, 0 deletions
diff --git a/cgit/ssh/git-shell-commands/fork b/cgit/ssh/git-shell-commands/fork
index 52803d3..c2bc799 100755
--- a/cgit/ssh/git-shell-commands/fork
+++ b/cgit/ssh/git-shell-commands/fork
@@ -12,6 +12,7 @@ fi
repo_name="$1"; shift 1;
[ -z "$repo_name" ] && echo "Error: empty repo name" 1>&2 && exit 1
+(echo "$repo_name" | grep -q "^[A-Za-z0-9_-]\+$" 2>/dev/null) || (echo "Error: invalid repo name" 1>&2 && exit 1)
remote_repo_url="$1"; shift 1;
[ -z "$remote_repo_url" ] && echo "Error: empty repo url" 1>&2 && exit 1
diff --git a/cgit/ssh/git-shell-commands/new b/cgit/ssh/git-shell-commands/new
index ec2d8ca..6b5a03d 100755
--- a/cgit/ssh/git-shell-commands/new
+++ b/cgit/ssh/git-shell-commands/new
@@ -12,6 +12,7 @@ fi
repo_name="$1"; shift 1;
[ -z "$repo_name" ] && echo "Error: empty repo name" 1>&2 && exit 1
+(echo "$repo_name" | grep -q "^[A-Za-z0-9_-]\+$" 2>/dev/null) || (echo "Error: invalid repo name" 1>&2 && exit 1)
# Stupid cmdline parsing means I can't do $1 here for space separated stuff
description="$*"
diff --git a/cgit/ssh/git-shell-commands/set-description b/cgit/ssh/git-shell-commands/set-description
index a120fa0..ea0e52e 100755
--- a/cgit/ssh/git-shell-commands/set-description
+++ b/cgit/ssh/git-shell-commands/set-description
@@ -9,6 +9,7 @@ fi
repo_name="$1"; shift 1;
[ -z "$repo_name" ] && echo "Error: empty repo name" 1>&2 && exit 1
+(echo "$repo_name" | grep -q "^[A-Za-z0-9_-]\+$" 2>/dev/null) || (echo "Error: invalid repo name" 1>&2 && exit 1)
description="$*";
[ -z "$description" ] && echo "Error: empty description" 1>&2 && exit 1