From b3d4fe72d35d7542f54b8c81e2f59f66723df1df Mon Sep 17 00:00:00 2001 From: Akshay Nair Date: Sun, 5 Jul 2026 19:38:11 +0530 Subject: Some hardening --- cgit/ssh/git-shell-commands/fork | 1 + 1 file changed, 1 insertion(+) (limited to 'cgit/ssh/git-shell-commands/fork') diff --git a/cgit/ssh/git-shell-commands/fork b/cgit/ssh/git-shell-commands/fork index 52803d3..c2bc799 100755 --- a/cgit/ssh/git-shell-commands/fork +++ b/cgit/ssh/git-shell-commands/fork @@ -12,6 +12,7 @@ fi repo_name="$1"; shift 1; [ -z "$repo_name" ] && echo "Error: empty repo name" 1>&2 && exit 1 +(echo "$repo_name" | grep -q "^[A-Za-z0-9_-]\+$" 2>/dev/null) || (echo "Error: invalid repo name" 1>&2 && exit 1) remote_repo_url="$1"; shift 1; [ -z "$remote_repo_url" ] && echo "Error: empty repo url" 1>&2 && exit 1 -- cgit v1.3.1