Hi, Andreas, Von: Andreas Krey [mailto:a.k...@gmx.de] > > On Mon, 01 Aug 2011 08:57:52 +0000, Markus Schaber wrote: > ... > > Hmm. For http(s)://, svn:// and well set-up svn+ssh:// servers, he > > should not be able to create repository corruption, right? I would > > consider everything else to be a serious security bug in subversion. > > Setting invalid svn:mergeinfo counts as repository corruption? Then it's > possible.
But then that's something that you also can do via the standard svn client libraries, so using a handcrafted client is not making things worse here. Best regards Markus Schaber ___________________________ We software Automation. 3S-Smart Software Solutions GmbH Markus Schaber | Developer Memminger Str. 151 | 87439 Kempten | Germany | Tel. +49-831-54031-0 | Fax +49-831-54031-50 Email: m.scha...@3s-software.com | Web: http://www.3s-software.com CoDeSys internet forum: http://forum.3s-software.com Download CoDeSys sample projects: http://www.3s-software.com/index.shtml?sample_projects Managing Directors: Dipl.Inf. Dieter Hess, Dipl.Inf. Manfred Werner | Trade register: Kempten HRB 6186 | Tax ID No.: DE 167014915
