Sunil Mohan Adapa 3001099cda

gitweb: Fix issue with elevated access to private repositories ...

When using git-http-backend, both URLs ending with and without .git are allowed.
However, access restriction has only be applied for URLs ending with .git. This
means that private git repositories are clone-able by anonymous users by
removing the .git suffix in the URLs.

Fix the issue by extending the access restriction to cover URLs not ending with
.git.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>

2019-10-19 19:14:04 -07:00

..

etc

gitweb: Fix issue with elevated access to private repositories

2019-10-19 19:14:04 -07:00