phi...@apache.org writes: > Author: philip > Date: Tue Jul 17 10:12:20 2012 > New Revision: 1362434 > > URL: http://svn.apache.org/viewvc?rev=1362434&view=rev > Log: > Allow third party FS modules to be loaded when configured > with --enable-runtime-module-search.
Until now anyone wanting to write an FS module had a problem: only modules known to the Subversion project could be loaded and used. That means that anyone wanting to write their own module had to get a patch for their module name into the core Subversion code. Or write their own loader/server. I don't think there is any security risk here: I need to write to the repository fs-type file to get a malicious module to load and if I can do that it would be far easier to use one of the hook scripts. We could do the same for RA modules but I have no plans to implement it. Disclaimer: at WANdisco we plan to use this feature. -- Philip
