From b3d4fe72d35d7542f54b8c81e2f59f66723df1df Mon Sep 17 00:00:00 2001 From: Akshay Nair Date: Sun, 5 Jul 2026 19:38:11 +0530 Subject: Some hardening --- cgit/ssh/git-shell-commands/set-description | 1 + 1 file changed, 1 insertion(+) (limited to 'cgit/ssh/git-shell-commands/set-description') diff --git a/cgit/ssh/git-shell-commands/set-description b/cgit/ssh/git-shell-commands/set-description index a120fa0..ea0e52e 100755 --- a/cgit/ssh/git-shell-commands/set-description +++ b/cgit/ssh/git-shell-commands/set-description @@ -9,6 +9,7 @@ fi repo_name="$1"; shift 1; [ -z "$repo_name" ] && echo "Error: empty repo name" 1>&2 && exit 1 +(echo "$repo_name" | grep -q "^[A-Za-z0-9_-]\+$" 2>/dev/null) || (echo "Error: invalid repo name" 1>&2 && exit 1) description="$*"; [ -z "$description" ] && echo "Error: empty description" 1>&2 && exit 1 -- cgit v1.3.1