Uploaded image for project: 'Sourcetree for Windows'
  1. Sourcetree for Windows
  2. SRCTREEWIN-8789

Linux Git Server - Ampersand (&) in tag is not properly handled when closing a branch

XMLWordPrintable

    • Severity 3 - Minor

      I attempted to close a feature branch. I added the tag that included an ampersand (CNT-421&CNTUI-123). The tag that was applied to the branch was CNT-421 as the ampersand was not escaped when running the command in Git. The ampersand was treated the same as an ampersand in Bash, which allows the command to run in the background. There is a possible security hole here as well as it may be possible to inject bash scripting after the ampersand since the shell being used to run the command may return to a usable shell after the ampersand is processed. The ampersand (and probably other characters) needs to be properly escaped when included in the tag of a branch closure.

            [SRCTREEWIN-8789] Linux Git Server - Ampersand (&) in tag is not properly handled when closing a branch

            No work has yet been logged on this issue.

              Unassigned Unassigned
              8a811e88aae6 kg4ysy
              Affected customers:
              0 This affects my team
              Watchers:
              2 Start watching this issue

                Created:
                Updated: