Jakub Zych 2f3eba0cb1 fix(34): WR-03 refuse user info in https git URLs ...

validateGitURL refused only a password, but GitHub, GitLab and Gitea take
a token as the user part of an https URL. Such a URL was printed and
written to .gitmodules by git submodule add, and so committed with the
application. An https URL with any user info is now refused with a hint
to use a credential helper; the user of an ssh URL stays allowed.

2026-10-29 22:09:39 +01:00

22 KiB

Raw Blame History

View Raw