Make audit_path more stringent. The following properties of a path are now checked for: - under top-level .hg - starts at the root of a windows drive - contains ".." - traverses a symlink (e.g. a/symlink_here/b) - inside a nested repository If any of these is true, the path is rejected. The check for traversing a symlink is arguably stricter than necessary; perhaps we should be checking for symlinks that point outside the repository.

     1

% should fail

     2

abort: path contains illegal component: .hg/00changelog.i

     3

adding a/a

     4

% should fail

     5

abort: path 'b/b' traverses symbolic link 'b'

     6

% should succeed

     7

% should still fail - maybe

     8

abort: path 'b/b' traverses symbolic link 'b'