From mboxrd@z Thu Jan  1 00:00:00 1970
From: cgit at cryptocrack.de (Lukas Fleischer)
Date: Fri, 10 Jan 2014 18:14:50 +0100
Subject: [PATCH] Disallow downloading disabled snapshot formats
In-Reply-To: <CAHmME9pkeiuPumvbUJbtMqZM6s2G-TFw8qfyaJiaKBZFq+TZmg@mail.gmail.com>
References: <1389364686-14089-1-git-send-email-cgit@cryptocrack.de>
 <CAHmME9pkeiuPumvbUJbtMqZM6s2G-TFw8qfyaJiaKBZFq+TZmg@mail.gmail.com>
Message-ID: <20140110171450.15387.94020@typhoon.lan>

On Fri, 10 Jan 2014 at 17:11:46, Jason A. Donenfeld wrote:
> On Fri, Jan 10, 2014 at 3:38 PM, Lukas Fleischer <cgit at cryptocrack.de> wrote:
> > We did only display enabled snapshot formats but we did not prevent from
> > downloading disabled formats when requested. Fix this by adding an
> > appropriate check.
> 
> Previously:
> http://lists.zx2c4.com/pipermail/cgit/2012-June/000641.html
> http://lists.zx2c4.com/pipermail/cgit/2012-October/000792.html

I was also thinking of server load. If we want to leave it as-is, we
should fix the documentation which currently says:

    repo.snapshots::
    	A mask of allowed snapshot-formats for this repo, restricted by
    	the "snapshots" global setting. Default value: <snapshots>.

There should at least be a note stating that "allowed" only means
"linked" here.