26 Jul
2015
26 Jul
'15
5:08 p.m.
* Gordian Edenhofer <gordian.edenhofer@gmail.com> (Sun, 26 Jul 2015 18:34:28 +0200):
I am against calculating the .SRCINFO on the server because of the already stated security issues. However I agree that it is a growing problem for AUR helpers. A reasonable approach would be to at least remind the user through git each time a commit with no .SRCINFO was pushed.
There already is a hook that tests if .SRCINFO exists, among other files: https://projects.archlinux.org/aurweb.git/tree/git-interface/git-update.py#n... Best, Marcel