On 07/26/2012 03:04 PM, rhuij...@apache.org wrote:
Author: rhuijben
Date: Thu Jul 26 22:04:03 2012
New Revision: 1366209
URL: http://svn.apache.org/viewvc?rev=1366209&view=rev
Log:
* subversion/libsvn_wc/externals.c
(svn_wc__resolve_relative_external_url):
Deny /../ syntax in urls in externals. Stepping over the
root of a server is not possible.
The first sentence sounds like no /../ are allowed in any external URLs
which isn't the case, it appears with your change they are not allowed
anywhere for any scheme or server root relative path, just just past the
first two characters.
Blair
