43 lines
		
	
	
	
		
			1.2 KiB
		
	
	
	
		
			Bash
		
	
	
		
			Executable file
		
	
	
	
	
			
		
		
	
	
			43 lines
		
	
	
	
		
			1.2 KiB
		
	
	
	
		
			Bash
		
	
	
		
			Executable file
		
	
	
	
	
#!/bin/sh
 | 
						|
 | 
						|
test_description='test protocol whitelisting with submodules'
 | 
						|
. ./test-lib.sh
 | 
						|
. "$TEST_DIRECTORY"/lib-proto-disable.sh
 | 
						|
 | 
						|
setup_ext_wrapper
 | 
						|
setup_ssh_wrapper
 | 
						|
 | 
						|
test_expect_success 'setup repository with submodules' '
 | 
						|
	mkdir remote &&
 | 
						|
	git init remote/repo.git &&
 | 
						|
	(cd remote/repo.git && test_commit one) &&
 | 
						|
	# submodule-add should probably trust what we feed it on the cmdline,
 | 
						|
	# but its implementation is overly conservative.
 | 
						|
	GIT_ALLOW_PROTOCOL=ssh git submodule add remote:repo.git ssh-module &&
 | 
						|
	GIT_ALLOW_PROTOCOL=ext git submodule add "ext::fake-remote %S repo.git" ext-module &&
 | 
						|
	git commit -m "add submodules"
 | 
						|
'
 | 
						|
 | 
						|
test_expect_success 'clone with recurse-submodules fails' '
 | 
						|
	test_must_fail git clone --recurse-submodules . dst
 | 
						|
'
 | 
						|
 | 
						|
test_expect_success 'setup individual updates' '
 | 
						|
	rm -rf dst &&
 | 
						|
	git clone . dst &&
 | 
						|
	git -C dst submodule init
 | 
						|
'
 | 
						|
 | 
						|
test_expect_success 'update of ssh allowed' '
 | 
						|
	git -C dst submodule update ssh-module
 | 
						|
'
 | 
						|
 | 
						|
test_expect_success 'update of ext not allowed' '
 | 
						|
	test_must_fail git -C dst submodule update ext-module
 | 
						|
'
 | 
						|
 | 
						|
test_expect_success 'user can override whitelist' '
 | 
						|
	GIT_ALLOW_PROTOCOL=ext git -C dst submodule update ext-module
 | 
						|
'
 | 
						|
 | 
						|
test_done
 |