+13

knotserver/git.go

Reviewed

··· 93 93 } 94 94 } 95 95 96 96 + func (d *Handle) ReceivePack(w http.ResponseWriter, r *http.Request) { 97 97 + did := chi.URLParam(r, "did") 98 98 + name := chi.URLParam(r, "name") 99 99 + _, err := securejoin.SecureJoin(d.c.Repo.ScanPath, filepath.Join(did, name)) 100 100 + if err != nil { 101 101 + gitError(w, err.Error(), http.StatusForbidden) 102 102 + d.l.Error("git: failed to secure join repo path", "handler", "ReceivePack", "error", err) 103 103 + return 104 104 + } 105 105 + 106 106 + d.RejectPush(w, r, name) 107 107 + } 108 108 + 96 109 func (d *Handle) RejectPush(w http.ResponseWriter, r *http.Request, unqualifiedRepoName string) { 97 110 // A text/plain response will cause git to print each line of the body 98 111 // prefixed with "remote: ".

+1

knotserver/handler.go

Reviewed

··· 83 83 r.Get("/", h.RepoIndex) 84 84 r.Get("/info/refs", h.InfoRefs) 85 85 r.Post("/git-upload-pack", h.UploadPack) 86 86 + r.Post("/git-receive-pack", h.ReceivePack) 86 87 r.Get("/compare/{rev1}/{rev2}", h.Compare) // git diff-tree compare of two objects 87 88 88 89 r.With(h.VerifySignature).Post("/hidden-ref/{forkRef}/{remoteRef}", h.NewHiddenRef)