<feed xmlns='http://www.w3.org/2005/Atom'>
<title>cgit-70/filters, branch v0.9.1</title>
<subtitle>a fork of cgit with a Gopher interface</subtitle>
<link rel='alternate' type='text/html' href='http://5.196.69.93/cgit-70/'/>
<entry>
<title>syntax-highlighting.sh: Fix command injection.</title>
<updated>2012-10-28T02:05:50+00:00</updated>
<author>
<name>Jason A. Donenfeld</name>
<email>Jason@zx2c4.com</email>
</author>
<published>2012-10-28T02:03:41+00:00</published>
<link rel='alternate' type='text/html' href='http://5.196.69.93/cgit-70/commit/?id=7ea35f9f8ecf61ab42be9947aae1176ab6e089bd'/>
<id>7ea35f9f8ecf61ab42be9947aae1176ab6e089bd</id>
<content type='text'>
By not quoting the argument, an attacker with the ability to add files
to the repository could pass arbitrary arguments to the highlight
command, in particular, the --plug-in argument which can lead to
arbitrary command execution.

This patch adds simple argument quoting.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
By not quoting the argument, an attacker with the ability to add files
to the repository could pass arbitrary arguments to the highlight
command, in particular, the --plug-in argument which can lead to
arbitrary command execution.

This patch adds simple argument quoting.
</pre>
</div>
</content>
</entry>
<entry>
<title>syntax-highlight: when the file has no extension, assume text</title>
<updated>2012-10-09T11:19:12+00:00</updated>
<author>
<name>Ferry Huberts</name>
<email>ferry.huberts@pelagic.nl</email>
</author>
<published>2012-10-09T11:10:48+00:00</published>
<link rel='alternate' type='text/html' href='http://5.196.69.93/cgit-70/commit/?id=d14faf4424ae06ced696c15f205c85fe55b8e6e7'/>
<id>d14faf4424ae06ced696c15f205c85fe55b8e6e7</id>
<content type='text'>
There are 2 situations:
1- empty extension: assuming text is better than highlight
   producing no output because of a missing argument.
2- no extension at all: assuming text is better than setting
   the extension to the filename, which is what now happens.

Signed-off-by: Ferry Huberts &lt;ferry.huberts@pelagic.nl&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
There are 2 situations:
1- empty extension: assuming text is better than highlight
   producing no output because of a missing argument.
2- no extension at all: assuming text is better than setting
   the extension to the filename, which is what now happens.

Signed-off-by: Ferry Huberts &lt;ferry.huberts@pelagic.nl&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Revert "filters/syntax-highlighting.sh: work around highlight --force bug"</title>
<updated>2012-10-09T11:12:09+00:00</updated>
<author>
<name>Ferry Huberts</name>
<email>ferry.huberts@pelagic.nl</email>
</author>
<published>2012-10-09T11:08:30+00:00</published>
<link rel='alternate' type='text/html' href='http://5.196.69.93/cgit-70/commit/?id=2ad9063cb53b55b1456c7d2ed08e6fb99d32ab78'/>
<id>2ad9063cb53b55b1456c7d2ed08e6fb99d32ab78</id>
<content type='text'>
This reverts commit f50be7fda0a7ab57009169dd5905fcbab8eb5166.

An update with the latest highlight landed in EPEL. This new version
doesn't have the --force bug, so the workaround can now be removed.

Signed-off-by: Ferry Huberts &lt;ferry.huberts@pelagic.nl&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This reverts commit f50be7fda0a7ab57009169dd5905fcbab8eb5166.

An update with the latest highlight landed in EPEL. This new version
doesn't have the --force bug, so the workaround can now be removed.

Signed-off-by: Ferry Huberts &lt;ferry.huberts@pelagic.nl&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge branch 'stable'</title>
<updated>2012-03-18T20:23:30+00:00</updated>
<author>
<name>Lars Hjemli</name>
<email>hjemli@gmail.com</email>
</author>
<published>2012-03-18T20:23:30+00:00</published>
<link rel='alternate' type='text/html' href='http://5.196.69.93/cgit-70/commit/?id=08352c7a02f057f6cbaf817ca7e53c53be590a62'/>
<id>08352c7a02f057f6cbaf817ca7e53c53be590a62</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>filters/syntax-highlighting.sh: work around highlight --force bug</title>
<updated>2012-03-18T20:12:36+00:00</updated>
<author>
<name>Ferry Huberts</name>
<email>ferry.huberts@pelagic.nl</email>
</author>
<published>2012-03-18T11:48:01+00:00</published>
<link rel='alternate' type='text/html' href='http://5.196.69.93/cgit-70/commit/?id=f50be7fda0a7ab57009169dd5905fcbab8eb5166'/>
<id>f50be7fda0a7ab57009169dd5905fcbab8eb5166</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>filters/highlight.sh: manually support highlight version 2 and 3</title>
<updated>2012-03-18T20:12:35+00:00</updated>
<author>
<name>Ferry Huberts</name>
<email>ferry.huberts@pelagic.nl</email>
</author>
<published>2012-03-18T11:38:26+00:00</published>
<link rel='alternate' type='text/html' href='http://5.196.69.93/cgit-70/commit/?id=375353caffb0a251e7f0174aa9b73cc1961e93fd'/>
<id>375353caffb0a251e7f0174aa9b73cc1961e93fd</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>commit-links.sh: improve regular expressions</title>
<updated>2011-07-19T07:12:02+00:00</updated>
<author>
<name>Ferry Huberts</name>
<email>ferry.huberts@pelagic.nl</email>
</author>
<published>2011-07-18T10:45:20+00:00</published>
<link rel='alternate' type='text/html' href='http://5.196.69.93/cgit-70/commit/?id=afdff8dc1327ed14c94cf447272191bd28009ed1'/>
<id>afdff8dc1327ed14c94cf447272191bd28009ed1</id>
<content type='text'>
The default length for sha1 abbreviations in git is 7.

A '#num' at the beginning of the commit message is now
recognised, a ':#num' as well, etc.: a '#num' anywhere
is now converted to a link.

Signed-off-by: Ferry Huberts &lt;ferry.huberts@pelagic.nl&gt;
Signed-off-by: Lars Hjemli &lt;hjemli@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The default length for sha1 abbreviations in git is 7.

A '#num' at the beginning of the commit message is now
recognised, a ':#num' as well, etc.: a '#num' anywhere
is now converted to a link.

Signed-off-by: Ferry Huberts &lt;ferry.huberts@pelagic.nl&gt;
Signed-off-by: Lars Hjemli &lt;hjemli@gmail.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>filters: document environment variables in filter scripts</title>
<updated>2011-03-26T10:03:42+00:00</updated>
<author>
<name>Ferry Huberts</name>
<email>ferry.huberts@pelagic.nl</email>
</author>
<published>2011-03-23T10:57:44+00:00</published>
<link rel='alternate' type='text/html' href='http://5.196.69.93/cgit-70/commit/?id=b2cf630a4b423bbda6507b7f658042563e76b36e'/>
<id>b2cf630a4b423bbda6507b7f658042563e76b36e</id>
<content type='text'>
Signed-off-by: Ferry Huberts &lt;ferry.huberts@pelagic.nl&gt;
Signed-off-by: Lars Hjemli &lt;hjemli@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Ferry Huberts &lt;ferry.huberts@pelagic.nl&gt;
Signed-off-by: Lars Hjemli &lt;hjemli@gmail.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>commit-links.sh: Seperate the expressions for filtering commit messages.</title>
<updated>2010-07-22T21:49:23+00:00</updated>
<author>
<name>Jeff Smith</name>
<email>whydoubt@yahoo.com</email>
</author>
<published>2010-07-06T03:38:34+00:00</published>
<link rel='alternate' type='text/html' href='http://5.196.69.93/cgit-70/commit/?id=f9143171267e39f66a02ad2ecb0da2e8cc7f4142'/>
<id>f9143171267e39f66a02ad2ecb0da2e8cc7f4142</id>
<content type='text'>
This allows for putting descriptions closer to their expressions.  It
should also make it clearer how to apply an expression conditionally.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This allows for putting descriptions closer to their expressions.  It
should also make it clearer how to apply an expression conditionally.
</pre>
</div>
</content>
</entry>
<entry>
<title>syntax highlighting for all formats supported by "highlight"</title>
<updated>2009-11-19T11:14:45+00:00</updated>
<author>
<name>Georg Lukas</name>
<email>georg@op-co.de</email>
</author>
<published>2009-11-19T11:14:45+00:00</published>
<link rel='alternate' type='text/html' href='http://5.196.69.93/cgit-70/commit/?id=56522ebe1387721d10196e835346257e7494abad'/>
<id>56522ebe1387721d10196e835346257e7494abad</id>
<content type='text'>
The highlight tool can be given any of the supported file extensions
as its -S parameter. This patch replaces the case-switch by extracting
the extension from the supplied file name and passing it to highlight.
However, this requires a shell supporting the ${var##pattern} syntax,
like dash or bash.

Unknown extensions cause a fall-back to plain text using the --force
switch. Error messages are redirected to /dev/null.

A special case maps Makefile and Makefile.* to the "mk" extension.

The total overhead is reduced by calling "exec highlight". No forks are
needed during script execution.

Signed-off-by: Georg Lukas &lt;georg@op-co.de&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The highlight tool can be given any of the supported file extensions
as its -S parameter. This patch replaces the case-switch by extracting
the extension from the supplied file name and passing it to highlight.
However, this requires a shell supporting the ${var##pattern} syntax,
like dash or bash.

Unknown extensions cause a fall-back to plain text using the --force
switch. Error messages are redirected to /dev/null.

A special case maps Makefile and Makefile.* to the "mk" extension.

The total overhead is reduced by calling "exec highlight". No forks are
needed during script execution.

Signed-off-by: Georg Lukas &lt;georg@op-co.de&gt;
</pre>
</div>
</content>
</entry>
</feed>
