You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-[`-r`](../-r): branch with forbidden name, and in particular one that may be used for shell injection.
88
91
89
-
-`<script>alert('xss')</script>` and `<b>a</b>`: XSS attempts
90
-
91
92
Create manually with `cp master -- -r` and push with `git push --all`.
92
93
94
+
-`<script>alert('xss')</script>` and `<b>a</b>`: XSS attempts
95
+
93
96
-`tag-empty-blob`: a tag that points to a blob
94
97
95
98
-[`a;{echo,INJECTION};{echo,RULZ};`](a;{echo,INJECTION};{echo,RULZ};): GitHub proposes a shell injection to users on a pull request under "You can also merge branches on the command line". <https://github.com/cirosantilli/test/pull/17>
0 commit comments