uschindler commented on issue #11957:
URL: https://github.com/apache/lucene/issues/11957#issuecomment-1322059176

   Hi,
   
   > Yeah... it's absolutely terrible that jgit blindly forks git off the path. 
I just made the Lucene build open a file editor by renaming it to git.exe...
   
   I think this is a security issue in jgit? It should not do this. I thinkw e 
should open an issue. I have the feeling the whole issue is around atomic file 
modifications (according to their code comments). The code in JGit still uses 
old `java.io.File`, so I have the feeling when they update to `java.nio.files` 
(Java 7), all should be fine and native Git access is not needed.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org

Reply via email to