Method validSymlinkName

worktree_fs.go:248–264

validSymlinkName checks the per-component name of a symlink for dotfile names that attackers can use to trick a checkout into writing a dangerous symlink. Each path component is compared against .gitmodules case-insensitively, against its NTFS variants (e.g. ".gitmodules .", ".gitmodules::$INDEX_ALL

(name string)

//
// [1]: https://github.com/git/git/blob/v2.54.0/read-cache.c#L1004-L1024
func (sfs *worktreeFilesystem) validSymlinkName(name string) error {
	parts := strings.FieldsFunc(name, func(r rune) bool {
		return r == '/' || r == '\\'
	})
	for _, part := range parts {
		if strings.EqualFold(part, gitmodulesFile) {
			return ErrGitModulesSymlink
		}
		if sfs.protectNTFS && pathutil.IsNTFSDotGitmodules(part) {
			return ErrGitModulesSymlink
		}
		if sfs.protectHFS && pathutil.IsHFSDotGitmodules(part) {
			return ErrGitModulesSymlink
		}
	}
	return nil
}