Subject: Re: Git clone reads safe.directory differently?

From: Junio C Hamano <[email-masked]>
Date: Tue, 30 Jul 2024 15:55:17 -0700

Junio C Hamano <[email-masked]> writes:

> When you are using "--no-local" on the same machine, I do not think
> there is any guarantee that "upload-pack" side is safe.  And that is
> where the safe.directory thing needs to kick in.

Ah, I take it back.  packObjectsHook won't run based on what the
untrusted source repository configures, so at least we have been
aware of the fact that upload-pack must be more careful than other
stuff.