mirror of
https://github.com/git-for-windows/git.git
synced 2026-04-11 01:53:21 -05:00
9d166b3836
The preceding two commits introduced special handling of the sideband channel to neutralize ANSI escape sequences before sending the payload to the terminal, and `sideband.allowControlCharacters` to override that behavior. However, some `pre-receive` hooks that are actively used in practice want to color their messages and therefore rely on the fact that Git passes them through to the terminal. In contrast to other ANSI escape sequences, it is highly unlikely that coloring sequences can be essential tools in attack vectors that mislead Git users e.g. by hiding crucial information. Therefore we can have both: Continue to allow ANSI coloring sequences to be passed to the terminal, and neutralize all other ANSI escape sequences. Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
17 lines
579 B
Plaintext
17 lines
579 B
Plaintext
sideband.allowControlCharacters::
|
|
By default, control characters that are delivered via the sideband
|
|
are masked, except ANSI color sequences. This prevents potentially
|
|
unwanted ANSI escape sequences from being sent to the terminal. Use
|
|
this config setting to override this behavior:
|
|
+
|
|
--
|
|
color::
|
|
Allow ANSI color sequences, line feeds and horizontal tabs,
|
|
but mask all other control characters. This is the default.
|
|
false::
|
|
Mask all control characters other than line feeds and
|
|
horizontal tabs.
|
|
true::
|
|
Allow all control characters to be sent to the terminal.
|
|
--
|