Uploaded image for project: 'Subversion'
  1. Subversion
  2. SVN-1051

mod_dav_svn displays real path to repository when empty

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Critical
    • Resolution: Unresolved
    • Affects Version/s: all
    • Fix Version/s: unscheduled
    • Component/s: mod_dav_svn
    • Labels:

      Description

      When accessing an empty repository (not initialized), mod_dav_svn
      displays the real path to the repository in the message:
      
      
      Expected version '1' of repository; found no version at all; is
      `c:/svn/repository' a valid repository path?
      
      I would consider this a potential security risk...
      

      http://svn.haxx.se/dev/archive-2005-04/0906.shtml

      Original issue reported by drobert_bfm

        Attachments

        1. 2_proposal.txt
          2 kB
          Daniel Rall
        2. 1_r7930.patch
          2 kB
          Daniel Rall

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              subversion-importer Subversion Importer
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: