From 3a2715736bcd7d526bc5fc5c6d8374b738829d20 Mon Sep 17 00:00:00 2001 From: Stephanie Morillo Date: Thu, 20 Jul 2017 12:01:41 -0400 Subject: Add line re: CGI escape Added a sentence in line 291 re: CGI escaping passwords and usernames. Resolves issue: https://github.com/bundler/bundler/issues/5643 --- man/bundle-config.ronn | 1 + 1 file changed, 1 insertion(+) (limited to 'man') diff --git a/man/bundle-config.ronn b/man/bundle-config.ronn index f1ba87dfd6..99746d57bb 100644 --- a/man/bundle-config.ronn +++ b/man/bundle-config.ronn @@ -288,6 +288,7 @@ revision in the `Gemfile.lock` to the local git repo revision. This requires the same attention as git submodules. Before pushing to the remote, you need to ensure the local override was pushed, otherwise you may point to a commit that only exists in your local machine. +You'll also need to CGI escape your usernames and passwords as well. Bundler does many checks to ensure a developer won't work with invalid references. Particularly, we force a developer to specify -- cgit v1.2.1