> to commit directly to the VCS, would be able to replace it. That breaks ikiwiki's
> security model, because replacing the setup file is sufficient to achieve
> arbitrary code execution as the user running the CGI and VCS hooks. --[[smcv]]
> to commit directly to the VCS, would be able to replace it. That breaks ikiwiki's
> security model, because replacing the setup file is sufficient to achieve
> arbitrary code execution as the user running the CGI and VCS hooks. --[[smcv]]