Re: [PATCH] transport: add core.allowProtocol config option

T_ALLOW_PROTOCOL, like 'go get' > <https://go.googlesource.com/go/+/55620a0e/src/cmd/go/vcs.go#64>. > Can we make it more convenient for them to support this configuration > too? Most of these are my fault too. I encouraged git-repo and mercurial to use GIT_ALLOW_PROTOCOL to avoid security issues from git-remote-ext. -- Blake Burkhart

Re: RFC: Resumable clone based on hybrid "smart" and "dumb" HTTP

this GIT_ALLOW_PROTOCOL was introduced, and git-submodule now uses it as of 33cfccb. This environment variable specifies a default whitelist of protocols. Whoever implements this should probably make use of GIT_ALLOW_PROTOCOL to limit resumable clones to the same default whitelist that git-submodule