[SVN-2749] Network interfaces should sanitize its input as it's outside facing

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: all
• Fix Version/s: unscheduled
• Component/s: unknown
• Assignee: Unassigned
• Reporter: Erik Huelsmann
• Created: 21/Mar/07 17:11
• Updated: 18/Sep/08 21:05

Description

There are several issues where mod_dav_svn assumes a Subversion client to be on
the other side. This however isn't guaranteed: we have SVNKit (former JavaSVN)
and WebDAV clients, none of which are guaranteed to behave the same way as our
own client.

mod_dav_svn should sanitize this input to prevent it from entering into our system.

Issue Links

• blocks: SVN-2199 svn_path_join() assertions causing Apache children to abort()
• blocks: SVN-2748 Non-UTF8 filenames can enter repository
• is depended upon by: SVN-2199 svn_path_join() assertions causing Apache children to abort()
• is depended upon by: SVN-2748 Non-UTF8 filenames can enter repository