Re: Confirm my false error suspicions of Gitweb query injection

and you earned bonus points for the details - thank you very much! On Mon, Sep 10, 2012 at 10:37 AM, Junio C Hamano wrote: > Joseph Leong writes: > >> Hi Everyone, >> >> I'm using Gitweb (Based on Git 1.7.9 on RHEL 5.8). >> >> I was poking around an

Confirm my false error suspicions of Gitweb query injection

Hi Everyone, I'm using Gitweb (Based on Git 1.7.9 on RHEL 5.8). I was poking around and tried a GET Request (REQ) with some SQL statements as a search query and noticed a 500. Can i just confirm with anyone here that the error message I'm seeing in the Response (RESP) is basically saying that the