]> git.ipfire.org Git - thirdparty/git.git/commit
contrib: drop hg-to-git script
authorJeff King <peff@peff.net>
Wed, 20 Mar 2024 09:48:24 +0000 (05:48 -0400)
committerJunio C Hamano <gitster@pobox.com>
Wed, 20 Mar 2024 17:23:45 +0000 (10:23 -0700)
commitba155b5cb7cdad1c2cdaf5aa9ff01adb4226aa3f
tree23abf4da997c0bccb1f816c019c2a67bb753cb68
parent3c2a3fdc388747b9eaf4a4a4f2035c1c9ddb26d0
contrib: drop hg-to-git script

The hg-to-git script is full of command injection vulnerabilities
against malicious branch and tag names. It's also old and largely
unmaintained; the last commit was over 4 years ago, and the last code
change before that was from 2013. Users are better off with a modern
remote-helper tool like cinnabar or remote-hg.

So rather than spending time to fix it, let's just get rid of it.

Reported-by: Matthew Rollings <admin@stealthcopter.com>
Signed-off-by: Jeff King <peff@peff.net>
Signed-off-by: Junio C Hamano <gitster@pobox.com>
contrib/hg-to-git/hg-to-git.py [deleted file]
contrib/hg-to-git/hg-to-git.txt [deleted file]