zhenyi
d243dce027
- Replaced manual remote client functions with remote_client! macro for archive, blame, branch, commit, and diff services - Simplified remote client creation logic using declarative macro approach - Maintained same functionality while reducing code duplication across services security(bare): enhance path traversal protection with comprehensive validation - Added early relative_path validation to prevent path traversal attacks - Implemented unified path validation to avoid TOCTOU race conditions - Enhanced canonicalization checks for both existing and non-existent paths - Added detailed logging for path traversal detection attempts feat(cache): migrate from CLruCache to Moka with TTL and invalidation support - Replaced clru dependency with moka for improved caching capabilities - Added 300-second time-to-live for cache entries - Implemented repository-specific cache invalidation mechanism - Enhanced cache operations with thread-safe async support refactor(commit): improve security validation for commit operations - Added ref name validation to prevent command injection in cherry_pick_commit - Implemented revision validation for commit selectors - Added comprehensive input validation for create_commit parameters - Enhanced file path validation to prevent traversal
56 lines
1.6 KiB
Rust
56 lines
1.6 KiB
Rust
pub mod find_files;
|
|
pub mod get_file_metadata;
|
|
pub mod get_tree;
|
|
pub mod list_tree;
|
|
|
|
use crate::bare::GitBare;
|
|
use crate::pb::{self, RecentCommit, object_selector};
|
|
|
|
pub(crate) fn resolve_revision(
|
|
sel: &Option<pb::ObjectSelector>,
|
|
) -> Result<String, crate::error::GitError> {
|
|
match sel.as_ref().and_then(|s| s.selector.as_ref()) {
|
|
Some(object_selector::Selector::Oid(oid)) => Ok(oid.hex.clone()),
|
|
Some(object_selector::Selector::Revision(name)) => {
|
|
crate::sanitize::validate_revision(&name.revision)?;
|
|
Ok(name.revision.clone())
|
|
}
|
|
None => Ok("HEAD".into()),
|
|
}
|
|
}
|
|
|
|
pub(crate) fn recent_commit(gb: &GitBare, revision: &str, path: &str) -> Option<RecentCommit> {
|
|
let output = std::process::Command::new("git")
|
|
.args([
|
|
"--git-dir",
|
|
&gb.bare_dir.to_string_lossy(),
|
|
"log",
|
|
"-1",
|
|
"--format=%H %s %at",
|
|
revision,
|
|
"--",
|
|
path,
|
|
])
|
|
.output()
|
|
.ok()?;
|
|
if !output.status.success() {
|
|
return None;
|
|
}
|
|
let line = String::from_utf8_lossy(&output.stdout).trim().to_string();
|
|
if line.is_empty() {
|
|
return None;
|
|
}
|
|
let (hex, rest) = line.split_once(' ')?;
|
|
let (subject, ts_str) = rest.rsplit_once(' ')?;
|
|
let ts: i64 = ts_str.parse().ok()?;
|
|
Some(RecentCommit {
|
|
oid: Some(gb.oid_to_pb(hex)),
|
|
subject: subject.to_string(),
|
|
committed_timestamp: ts,
|
|
})
|
|
}
|
|
|
|
pub(crate) fn is_lfs_pointer(data: &[u8]) -> bool {
|
|
data.starts_with(b"version https://git-lfs.github.com/spec/v1")
|
|
}
|