On Mon, 01 Aug 2011 08:57:52 +0000, Markus Schaber wrote: ... > Hmm. For http(s)://, svn:// and well set-up svn+ssh:// servers, he > should not be able to create repository corruption, right? I would > consider everything else to be a serious security bug in subversion.
Setting invalid svn:mergeinfo counts as repository corruption? Then it's possible. Andreas -- "Totally trivial. Famous last words." From: Linus Torvalds <torvalds@*.org> Date: Fri, 22 Jan 2010 07:29:21 -0800
