1414373 - Ban subrepositories on hg.mo

Status: RESOLVED FIXED

(Developer Services :: Mercurial: hg.mozilla.org, enhancement)

Description

[Gregory Szorc [:gps]]

We banned them on all but user repos in bug 1388559. Let's finish the job.

Comment 1

[Gregory Szorc [:gps]]

Attachment: hooks: prevent subrepositories universally on hg.mozilla.org (bug 1414373);

Subrepositories have had a bad record in terms of security. There are
no significant users of them on hg.mozilla.org.

Let's ban subrepos completely to reduce potential attack surface
area.

Review commit: https://reviewboard.mozilla.org/r/196358/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/196358/

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

Comment on attachment 8925118 [details]
hooks: prevent subrepositories universally on hg.mozilla.org (bug 1414373);

https://reviewboard.mozilla.org/r/196358/#review201548

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/hgcustom/version-control-tools/rev/bd44aec89c26
hooks: prevent subrepositories universally on hg.mozilla.org ; r=dustin

Comment 4

[Gregory Szorc [:gps]]

This is deployed to production.