zhenyi
d243dce027
- Replaced manual remote client functions with remote_client! macro for archive, blame, branch, commit, and diff services - Simplified remote client creation logic using declarative macro approach - Maintained same functionality while reducing code duplication across services security(bare): enhance path traversal protection with comprehensive validation - Added early relative_path validation to prevent path traversal attacks - Implemented unified path validation to avoid TOCTOU race conditions - Enhanced canonicalization checks for both existing and non-existent paths - Added detailed logging for path traversal detection attempts feat(cache): migrate from CLruCache to Moka with TTL and invalidation support - Replaced clru dependency with moka for improved caching capabilities - Added 300-second time-to-live for cache entries - Implemented repository-specific cache invalidation mechanism - Enhanced cache operations with thread-safe async support refactor(commit): improve security validation for commit operations - Added ref name validation to prevent command injection in cherry_pick_commit - Implemented revision validation for commit selectors - Added comprehensive input validation for create_commit parameters - Enhanced file path validation to prevent traversal
41 lines
1.4 KiB
Rust
41 lines
1.4 KiB
Rust
use std::process::Command;
|
|
|
|
use crate::bare::GitBare;
|
|
use crate::error::{GitError, GitResult};
|
|
use crate::pb::{Branch, CreateBranchRequest, GetBranchRequest, object_selector};
|
|
|
|
impl GitBare {
|
|
pub fn create_branch(&self, request: CreateBranchRequest) -> GitResult<Branch> {
|
|
crate::sanitize::validate_ref_name(&request.name)?;
|
|
let revision = match request.start_point.and_then(|s| s.selector) {
|
|
Some(object_selector::Selector::Oid(oid)) => oid.hex,
|
|
Some(object_selector::Selector::Revision(name)) => {
|
|
crate::sanitize::validate_revision(&name.revision)?;
|
|
name.revision
|
|
}
|
|
None => "HEAD".into(),
|
|
};
|
|
let mut args = vec!["branch".to_string()];
|
|
if request.force {
|
|
args.push("-f".into());
|
|
}
|
|
args.push(request.name.clone());
|
|
args.push(revision);
|
|
let output = Command::new("git")
|
|
.arg("--git-dir")
|
|
.arg(&self.bare_dir)
|
|
.args(&args)
|
|
.output()?;
|
|
if !output.status.success() {
|
|
return Err(GitError::CommandFailed {
|
|
status_code: output.status.code(),
|
|
stderr: String::from_utf8_lossy(&output.stderr).into_owned(),
|
|
});
|
|
}
|
|
self.get_branch(GetBranchRequest {
|
|
repository: request.repository,
|
|
name: request.name,
|
|
})
|
|
}
|
|
}
|