Roland f49288b8ec repos: validate branch names and repo directories ... Branch names are passed to git as arguments and come from the API, the config, a `/tree/<branch>` URL, or the remote itself (its default branch). A name starting with `-` would be read as an option, so every branch must pass git's ref-name rules, including in the downloader just before use. A repo URL with a `.` or `..` path segment (or a `..` name) could format a directory outside its template (e.g. `repos/<tag>/..` is the whole repos directory). Such URLs and names are rejected, and every repo directory, including one from repos.yaml, must be strictly inside the media directory with no `..`. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>		2026-10-06 16:56:09 -06:00
..
archive	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
docs	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
flasher	db: request-path library functions use the request's connection (#774)	2026-10-04 11:05:20 -06:00
inventory	Strip whitespace from inventory item string values on save	2026-07-30 17:34:46 -06:00
map	Map previews that never drew, and a Docker map with no world under it (#658)	2026-08-11 20:37:23 -06:00
repos	repos: validate branch names and repo directories	2026-10-06 16:56:09 -06:00
videos	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
zim	db: serializers read only loaded data (#777)	2026-10-04 18:28:08 -06:00
__init__.py	Add a Repos module that mirrors git repositories (backend)	2026-10-06 16:56:09 -06:00