3 ms·
Cloning a repository and cd'ing into it should always be safe, no matter what that repository is. This vulnerability makes it not safe.
by eridius 10y ago
Cloning a repository and cd'ing into it should always be safe, no matter what that repository is. This vulnerability makes it not safe.
- mikeash 10y agoIt wouldn't even require an explicit clone. An attacker could send you a zip file containing a malicious .git directory, and then you'd lose the moment you cd'd into the unzipped directory to check it out.