3 ms·

No.

• 0x0 13y ago
  Why not? Is it specific to github's "gerve" application? What and where is the bug exactly - I mean, how can a username with linefeeds end up setting environment variables? And what username is being set - ssh? github account? wouldn't you need to use exactly the username "git" when ssh'ing in to github to trigger this gerve app anyways?
  • SolarNet 13y ago
    Read closely and you'll see the answers in the link: Yes. "it is possible to inject some environment variables into gerve" Because it's his git hub username. You answered that question yourself: "And what username is being set - ssh? github account? wouldn't you need to use exactly the username 'git' when ssh'ing in to github to trigger this gerve app anyways?" So if it's not his ssh username it must be his... 'github username'! it's the only other possibility you could think of right? ...