←back to thread

348 points dgl | 1 comments | | HN request time: 0.219s | source
Show context
deanc ◴[] No.44502682[source]
Would homebrew itself be problematic here? Does it do recursive cloning?

At least a cursory glance at the repo suggests it might: https://github.com/Homebrew/brew/blob/700d67a85e0129ab8a893f...

replies(1): >>44503141 #
msgodel ◴[] No.44503141[source]
It would be odd if it didn't. Although the goal of homebrew is to execute the code in the repo.

The only situation where the RCE here is a problem is if you clone github repos containing data you don't want to execute. That's fairly unusual.

replies(2): >>44503420 #>>44504144 #
1. ◴[] No.44504144[source]