Ævar Arnfjörð Bjarmason 4a169da280 fetch doc: note "pushurl" caveat about "credentialsInUrl", elaborate ... Amend the documentation and release notes entry for the "fetch.credentialsInUrl" feature added in 6dcbdc0d66 (remote: create fetch.credentialsInUrl config, 2022-06-06), it currently doesn't detect passwords in `remote.<name>.pushurl` configuration. We shouldn't lull users into a false sense of security, so we need to mention that prominently. This also elaborates and clarifies the "exposes the password in multiple ways" part of the documentation. As noted in [1] a user unfamiliar with git's implementation won't know what to make of that scary claim, e.g. git hypothetically have novel git-specific ways of exposing configured credentials. The reality is that this configuration is intended as an aid for users who can't fully trust their OS's or system's security model, so lets say that's what this is intended for, and mention the most common ways passwords stored in configuration might inadvertently get exposed. 1. https://lore.kernel.org/git/220524.86ilpuvcqh.gmgdl@evledraar.gmail.com/ Signed-off-by: Ævar Arnfjörð Bjarmason <avarab@gmail.com> Acked-by: Derrick Stolee <derrickstolee@github.com> Signed-off-by: Junio C Hamano <gitster@pobox.com>		2022-06-15 11:39:02 -07:00
..
add.txt	add -i: default to the built-in implementation	2021-12-01 14:34:43 -08:00
advice.txt	Merge branch 'tk/ambiguous-fetch-refspec'	2022-04-04 10:56:24 -07:00
alias.txt	config/alias.txt: document alias accepting non-command first word	2019-06-06 09:33:42 -07:00
am.txt
apply.txt
blame.txt	blame: correct name of config option in docs	2021-06-28 10:05:13 -07:00
branch.txt	push: default to single remote even when not named origin	2022-04-29 11:20:55 -07:00
browser.txt
checkout.txt	parallel-checkout: add configuration options	2021-04-19 11:57:05 -07:00
clean.txt
clone.txt	clone, submodule: pass partial clone filters to submodules	2022-02-09 15:38:36 -08:00
color.txt	Merge branch 'hm/paint-hits-in-log-grep'	2021-11-01 13:48:08 -07:00
column.txt
commit.txt
commitgraph.txt	commit-graph: use config to specify generation type	2021-02-25 15:10:41 -08:00
completion.txt
core.txt	Merge branch 'ns/batch-fsync'	2022-06-03 14:30:34 -07:00
credential.txt	crendential-store: use timeout when locking file	2020-11-25 12:30:18 -08:00
diff.txt	rename: bump limit defaults yet again	2021-07-15 16:54:34 -07:00
difftool.txt
extensions.txt	Documentation: add extensions.worktreeConfig details	2022-02-08 09:49:20 -08:00
fastimport.txt
feature.txt	protocol: re-enable v2 protocol by default	2020-09-25 11:40:42 -07:00
fetch.txt	fetch doc: note "pushurl" caveat about "credentialsInUrl", elaborate	2022-06-15 11:39:02 -07:00
filter.txt
fmt-merge-msg.txt	config/fmt-merge-msg.txt: drop space in quote	2020-09-27 14:22:41 -07:00
format.txt	Merge branch 'jc/format-patch-name-max'	2020-11-21 15:14:38 -08:00
fsck.txt	config/fsck.txt: avoid starting line with dash	2019-03-07 09:25:32 +09:00
gc.txt	builtin/gc.c: conditionally avoid pruning objects via loose	2022-05-26 15:48:26 -07:00
gitcvs.txt
gitweb.txt
gpg.txt	Documentation/config/pgp.txt: add missing apostrophe	2022-01-26 18:31:59 -08:00
grep.txt	grep: clarify what grep.patternType=default means	2021-12-05 12:26:43 -08:00
gui.txt	docs: use "character encoding" to refer to commit-object encoding	2021-08-27 12:45:45 -07:00
guitool.txt
help.txt	help.c: help.autocorrect=prompt waits for user action	2021-08-14 11:20:49 -07:00
http.txt	http: add custom hostname to IP address resolutions	2022-05-16 09:46:52 -07:00
i18n.txt
imap.txt
index.txt	sparse-index: add index.sparse config option	2021-03-30 12:57:47 -07:00
init.txt	clone: respect remote unborn HEAD	2021-02-05 13:49:55 -08:00
instaweb.txt
interactive.txt	checkout: split part of it to new command 'restore'	2019-05-07 13:04:47 +09:00
log.txt	diff-merges: introduce log.diffMerges config variable	2021-04-16 23:38:35 -07:00
lsrefs.txt	ls-refs: report unborn targets of symrefs	2021-02-05 13:49:53 -08:00
mailinfo.txt
mailmap.txt
maintenance.txt	maintenance: incremental strategy runs pack-refs weekly	2021-02-09 23:09:29 -08:00
man.txt
merge.txt	update documentation for new zdiff3 conflictStyle	2021-12-01 14:45:59 -08:00
mergetool.txt	vimdiff: add tool documentation	2022-04-03 15:09:52 -07:00
notes.txt
pack.txt	midx.c: respect 'pack.writeBitmapHashcache' when writing bitmaps	2021-09-14 16:34:18 -07:00
pager.txt
pretty.txt
protocol.txt	protocol: re-enable v2 protocol by default	2020-09-25 11:40:42 -07:00
pull.txt	pull: remove support for --rebase=preserve	2021-09-07 21:45:32 -07:00
push.txt	push: new config option "push.autoSetupRemote" supports "simple" push	2022-04-29 11:20:55 -07:00
rebase.txt	rebase: remove transitory rebase.useBuiltin setting & env	2021-03-23 14:05:58 -07:00
receive.txt	receive-pack: new config receive.procReceiveRefs	2020-08-27 12:47:47 -07:00
remote.txt	docs: mention --refetch fetch option	2022-03-28 10:25:53 -07:00
remotes.txt
repack.txt	builtin/repack.c: allow configuring cruft pack generation	2022-05-26 15:48:26 -07:00
rerere.txt
safe.txt	Merge branch 'cb/path-owner-check-with-sudo'	2022-05-26 14:51:32 -07:00
sendemail.txt	send-email: remove non-working support for "sendemail.smtpssl"	2021-05-28 18:38:07 +09:00
sequencer.txt
showbranch.txt
sparse.txt	repo_read_index: add config to expect files outside sparse patterns	2022-03-01 23:37:48 -08:00
splitindex.txt
ssh.txt
stash.txt	stash: remove documentation for stash.useBuiltin	2022-01-27 18:00:37 -08:00
status.txt	status: add status.aheadbehind setting	2019-06-21 09:35:00 -07:00
submodule.txt	branch: add --recurse-submodules option for branch creation	2022-02-04 08:16:39 -08:00
tag.txt	separate tar.* config to its own source file	2020-03-18 12:42:09 -07:00
tar.txt	separate tar.* config to its own source file	2020-03-18 12:42:09 -07:00
trace2.txt	doc: fix some typos	2021-01-04 11:27:48 -08:00
transfer.txt	docs: clarify the interaction of transfer.hideRefs and namespaces	2021-09-01 07:54:30 -07:00
uploadarchive.txt
uploadpack.txt	list-objects: implement object type filter	2021-04-19 14:09:11 -07:00
url.txt
user.txt	ssh signing: support non ssh-* keytypes	2021-11-19 09:05:25 -08:00
versionsort.txt
web.txt
worktree.txt