3 ms·

Couldn't that be mitigated by git adding a --readonly option that prevents any write operations? Then just use that option for any PS1 executables?

• Too 5y ago
  core.fsconfig is supposed to be read only, but since it’s an external process, git doesn’t know what really happens in there, so it can’t propagate any —-readonly enforcement.
  • leni536 5y ago
    That's where some sandboxing could help, maybe.