vcs: gitconfig: don't execute arbitrary commands from embedded bare repositories

[config/dotfiles.git] / vcs / gitconfig.in

diff --git a/vcs/gitconfig.in b/vcs/gitconfig.in
index e7d0893515a1c0b8f08967bdb8827994f15c988c..9efa88498075b078b7cdbd84a85667574700419e 100644 (file)
--- a/vcs/gitconfig.in
+++ b/vcs/gitconfig.in
@@ -250,6 +250,15 @@
        # Keep the default branch name
        defaultBranch = master
 
+[tag]
+       # Sort tags as version numbers
+       sort = version:refname
+
+[safe]
+       # Ignore embedded bare repositories to prevent executing arbitrary
+       # commands from untrusted repositories
+       bareRepository = explicit
+
 
 # NON-GIT SETTINGS