Make audit_path more stringent. The following properties of a path are now checked for: - under top-level .hg - starts at the root of a windows drive - contains ".." - traverses a symlink (e.g. a/symlink_here/b) - inside a nested repository If any of these is true, the path is rejected. The check for traversing a symlink is arguably stricter than necessary; perhaps we should be checking for symlinks that point outside the repository.

     1

#!/bin/sh

     2

     3

hg init a

     4

cd a

     5

hg init b

     6

echo x > b/x

     7

     8

echo '# should print nothing'

     9

hg add b

    10

hg st

    11

    12

echo '# should fail'

    13

hg st b/x

    14

hg add b/x

    15

    16

echo '# should arguably print nothing'

    17

hg st b

    18

    19

echo a > a

    20

hg ci -Ama a

    21

    22

echo '# should fail'

    23

hg mv a b

    24

hg st