b7ce11c97d
As discussed in the maintainer meeting on 2024-01-29. Mainly this is to avoid a situation where the name is parsed and treated as a file name, mostly to protect users. .-* and ..-* are also considered invalid because they might strip on that separator to remove versions. Doesn't really work, but that's what we decided, and I won't argue with it, because .-* probably doesn't seem to have a real world application anyway. We do still permit a 1-character name that's just "-", which still poses a similar risk in such a situation. We can't start disallowing trailing -, because a non-zero number of users will need it and we've seen how annoying and painful such a change is. What matters most is preventing a situation where . or .. can be injected, and to just get this done. (cherry picked from commit f1b4663805a9dbcb1ace64ec110092d17c9155e0) Change-Id: I900a8509933cee662f888c3c76fa8986b0058839 |
||
---|---|---|
.. | ||
data | ||
common-protocol.cc | ||
derivation.cc | ||
derived-path.cc | ||
downstream-placeholder.cc | ||
local.mk | ||
machines.cc | ||
nar-info-disk-cache.cc | ||
outputs-spec.cc | ||
path.cc | ||
protocol.hh | ||
references.cc | ||
serve-protocol.cc | ||
worker-protocol.cc |