Earl Warren
|
b98109ee69
|
[v12.0/forgejo] fix: use credentials helpers for git clones (#9068)
**Backport**: https://codeberg.org/forgejo/forgejo/pulls/9067
When performing a `git clone` that requires credentials, they are temporarily stored in files and used with [Git credential](https://git-scm.com/docs/gitcredentials/2.50.0#_requesting_credentials). They were previously included in the URL that were readable by a user with shell access to the host running the Forgejo instance when, for instance, they ask for the list of process (`ps`).
Co-authored-by: Gusted <postmaster@gusted.xyz>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9068
|
2025-08-30 18:45:56 +02:00 |
|