wrolpi/modules
Roland 2dd8e908c2
repos: check submodule URLs where git resolves them
A relative submodule URL is resolved by git against the repo's remote,
and can climb to another host: with the remote
https://git.example.com/owner/repo, `../../../10.0.0.5/x` is
https://10.0.0.5/x.  Relative URLs were allowed unchecked.

git now resolves the URLs first (`submodule init` + `sync` write them to
the repo's config), and those resolved URLs, the ones git fetches, are
checked.  A relative URL is never allowed by the check itself.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-06 16:56:10 -06:00
..
archive db: serializers read only loaded data (#777) 2026-10-04 18:28:08 -06:00
docs db: serializers read only loaded data (#777) 2026-10-04 18:28:08 -06:00
flasher db: request-path library functions use the request's connection (#774) 2026-10-04 11:05:20 -06:00
inventory Strip whitespace from inventory item string values on save 2026-07-30 17:34:46 -06:00
map Map previews that never drew, and a Docker map with no world under it (#658) 2026-08-11 20:37:23 -06:00
repos repos: check submodule URLs where git resolves them 2026-10-06 16:56:10 -06:00
videos db: serializers read only loaded data (#777) 2026-10-04 18:28:08 -06:00
zim db: serializers read only loaded data (#777) 2026-10-04 18:28:08 -06:00
__init__.py Add a Repos module that mirrors git repositories (backend) 2026-10-06 16:56:09 -06:00