On Sun, Jun 22, 2014 at 01:00:53PM -0600, Cox, Michael wrote:
> I like the idea of recognizing environment variable syntax in config files,
> at least a feature that would allow *some* config variables to be specified
> as accepting environment variable syntax. It adds a lot of flexibility,
> but I'm sure it might also introduce security issues that I am completely
> unaware of (like the issue you made me aware of above).
I don't think there are any security issues; if you control the
environment, you can already execute arbitrary code with git.
Now we just need somebody to volunteer to implement it. :)
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majord...@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html