Skip to content
  • Joey Hess's avatar
    filter out control characters in error messages · cd544e54
    Joey Hess authored
    giveup changed to filter out control characters. (It is too low level to
    make it use StringContainingQuotedPath.)
    
    error still does not, but it should only be used for internal errors,
    where the message is not attacker-controlled.
    
    Changed a lot of existing error to giveup when it is not strictly an
    internal error.
    
    Of course, other exceptions can still be thrown, either by code in
    git-annex, or a library, that include some attacker-controlled value.
    This does not guard against those.
    
    Sponsored-by: Noam Kremen on Patreon
    cd544e54